Trust Center
Clinics trust us with health data. These are the controls built into Sovica, and the documents behind them.
Controls
Your clinic stays in control
Your clinic is the controller of its patients’ data. Vahue Ltd is its processor, under a data processing agreement.
UK hosting
UK clinics’ data is stored and processed in the AWS London region (eu-west-2) and does not leave the UK for hosting.
Isolation between clinics
Every record belongs to one clinic, and the database itself enforces this with row-level security.
Encryption
Data is encrypted in transit with TLS and at rest with keys managed in AWS KMS.
Audit trail
Every change to business data is written to an append-only audit log.
Your data is yours
Export patients, appointments, notes, forms and financial data at any time.
Documents
Found a security issue? Email security@sovica.ai.