Security & Privacy

Privacy-first, by design.

Privacy isn't a setting you switch on. It's built into every step, from the moment a study arrives to the moment a family sees their scan.

Automatic de-identification

We remove burned-in name, DOB and MRN from the image and strip the PHI held in the DICOM header, automatically and before delivery. No manual editing.

No patient data stored

We don't build a database of your patients. Only the branded, de-identified images needed to share a scan are kept. Never raw, identifiable records.

Encrypted in transit

Images move over encrypted connections from your ultrasound machine through to the patient's phone, so data is protected on the wire.

Authenticated & access-controlled

Access to the system is authenticated and controlled, so only the right people at your clinic can send and manage studies.

Strict per-clinic isolation

Each clinic's data is isolated from every other clinic's. One practice can never see another's images or patients. Full stop.

Full audit trail

Every action is logged, so there's a clear, reviewable record of what happened and when. That's the accountability a medical workflow demands.

Regional frameworks

Aligned with the rules that matter where you practise

We're honest about language: PACSBridge is aligned with these frameworks and designed to support your obligations, not a substitute for your own compliance programme.

United States

HIPAA-aligned

Built around HIPAA's privacy principles to support the obligations your practice already carries.

  • Automatic de-identification before delivery
  • No raw, identifiable patient records stored
  • Designed to support your HIPAA obligations
  • Patient data is stored on AWS under a signed Business Associate Agreement

Europe

GDPR-aligned

European clients can discuss EU de-identification options as part of onboarding, built on privacy-by-design principles.

  • EU de-identification options available at onboarding
  • Data Processing Agreement available
  • Privacy-by-design & data-minimisation

New Zealand

Privacy Act 2020 aligned

Aligned with New Zealand's Privacy Act 2020, built on the same privacy-by-design principles as our US and EU coverage.

  • Aligned with the Privacy Act 2020
  • Proven in daily obstetric practice since 2017
  • Privacy-by-design from day one
Shared responsibility

Compliance is a partnership

Real compliance also depends on how a practice operates day to day. PACSBridge provides the privacy-by-design tooling and the data-protection agreements to support yours. The rest is the workflow and policies inside your clinic.

"We'd rather show you exactly how the system works than wave a certificate."

  • We provide the privacy-by-design tooling
  • We provide data-protection agreements to support you
  • You keep control of your clinic's workflow & policies
  • Full transparency: ask us anything about how it works

Have specific security questions?

We're happy to walk you through exactly how de-identification, isolation and logging work for your setup. No certificate to wave, just a straight answer.

Book a Q&A call →