Security & Privacy

Privacy-first, by design.

Privacy isn't a setting you switch on. It's built into every step, from the moment a study arrives to the moment a family sees their scan.

Automatic de-identification

We remove burned-in name, DOB and MRN from the image and strip the PHI held in the DICOM header, automatically and before delivery. No manual editing.

No patient data stored

We don't build a database of your patients. Only the branded, de-identified images needed to share a scan are kept. Never raw, identifiable records.

Encrypted in transit

Images move over encrypted connections from your ultrasound machine through to the patient's phone, so data is protected on the wire.

Authenticated & access-controlled

Access to the system is authenticated and controlled, so only the right people at your clinic can send and manage studies.

Strict per-clinic isolation

Each clinic's data is isolated from every other clinic's. One practice can never see another's images or patients. Full stop.

Full audit trail

Every action is logged, so there's a clear, reviewable record of what happened and when. That's the accountability a medical workflow demands.

Regional frameworks

Aligned with the rules that matter where you practise

We're honest about language: PACSBridge is aligned with these frameworks and designed to support your obligations, not a substitute for your own compliance programme.

United States

HIPAA-aligned

Built around HIPAA's privacy principles to support the obligations your practice already carries.

  • Automatic de-identification before delivery
  • No PHI stored on our servers
  • Designed to support your HIPAA obligations

Europe

GDPR-aligned

European clients can be served through EU-hosted infrastructure as part of onboarding, built on privacy-by-design principles.

  • EU-hosted de-identification proxy located in Germany, available for EU clients
  • Data Processing Agreement available
  • Privacy-by-design & data-minimisation

New Zealand

Privacy Act 2020 aligned

Where PACSBridge was built and proven, across real New Zealand radiology and obstetric practice.

  • Aligned with the Privacy Act 2020
  • Built & proven across NZ radiology
  • Privacy-by-design from day one
Shared responsibility

Compliance is a partnership

Real compliance also depends on how a practice operates day to day. PACSBridge provides the privacy-by-design tooling and the data-protection agreements to support yours. The rest is the workflow and policies inside your clinic.

"We'd rather show you exactly how the system works than wave a certificate."

  • We provide the privacy-by-design tooling
  • We provide data-protection agreements to support you
  • You keep control of your clinic's workflow & policies
  • Full transparency: ask us anything about how it works

Have specific security questions?

We're happy to walk you through exactly how de-identification, isolation and logging work for your setup. No certificate to wave, just a straight answer.

Book a call →