Data Security Policy

ODENVO applies reasonable technical and organisational measures appropriate to the sensitivity of the information we hold and the services we provide. As products handling clinical data move towards launch, security controls will be strengthened and documented in step with that data's sensitivity.

We prefer to state what we actually do rather than what sounds reassuring: this page describes our current practices, and we will publish verified, specific security details — including hosting arrangements and any certifications we obtain — as the platform matures. We do not claim security certifications, specific encryption standards or regulatory compliance that we have not verified.

Traffic to this website is served over HTTPS.

Access to systems that process information you send us is limited to the people and providers who need it to operate the service.

Enquiry data is handled only by our website systems and email service provider, under the terms described in our Third-Party Services Policy.

We keep our software and dependencies updated and review our setup as the platform grows.

ODENVO Practice is being designed so that clinic records remain accessible securely within the clinic, with role-based access control, audit trails for sensitive actions, and protection of data in transit. Detailed commitments will be published before any practice relies on the product for patient records.

Clinic administrators will control who in their clinic can access which records; ODENVO personnel will not browse clinic data, and any support access requiring it will be logged and based on a support request.

Where backups exist, they are protected with the same care as primary systems and retained for a limited cycle, after which they are deleted on our normal rotation. Our Data Retention & Deletion Policy explains how deletion requests interact with backups.

If a security incident affects personal information, we will work to identify, contain and remediate it, restore normal operation, and notify affected individuals and regulators where applicable law requires — including the timelines set by Indian law where it applies. We will describe what happened, what data was involved and what we are doing about it, to the extent the law and the investigation allow.

If you believe you have found a security vulnerability in an ODENVO service, please report it responsibly to support@odenvo.com with subject line “Security”. Give us a reasonable opportunity to investigate and fix before publishing details, and do not access or modify data that is not yours. We will acknowledge credible reports and keep you informed.

Security questions can be sent to support@odenvo.com. See also our Data Protection Policy and Privacy Policy.