ChamberSecurity and patient data
This page says only what we can show. Each statement was checked against our code, server configuration or a live test on . Where something is not in place yet, we say so. Applies to all ChamberBD products: ChamberBD (for doctors), ChamberBD Clinic, Physio, Dental and Hijama.
Where data is stored
- ChamberBD's application and database run on a server rented from Hetzner Online in its Helsinki, Finland data centre (European Union). Data is not stored in Bangladesh.
- Uploaded files (prescription images, appointment documents, receipts, diagnostic reports) are stored on the same server.
- The database is not reachable from the internet. The server runs a firewall, blocks repeated failed logins and installs security updates automatically.
Connections
- Every ChamberBD website and app is served over HTTPS. Plain-HTTP requests are redirected to HTTPS, and browsers are told to use HTTPS only (HSTS, 180 days, including subdomains).
- Traffic passes through Cloudflare. The connection from your browser to Cloudflare is encrypted; the connection from Cloudflare to our server is not yet encrypted — see Not covered yet.
- Standard browser protections are switched on: no framing by other sites, no content-type sniffing, a strict referrer policy.
Accounts and passwords
- Passwords are stored only as salted one-way hashes (bcrypt or Argon2). They are never sent back by our API.
- Sign-in uses signed tokens. Refresh tokens are rotated, and signing out revokes the access token.
- Login attempts and API requests are rate-limited per network address.
Who can see what
- Separation between accounts: every request is tied to one account, and every query is filtered by that account. ChamberBD Clinic, Physio, Dental and Hijama use a separate database from the doctor app.
- Doctor app staff: each staff account has per-chamber permissions for prescriptions, payments, expenses and appointments. The patient list and reports are currently visible to all of a doctor's staff — give staff accounts only to people who should see them.
- Clinic products: each role (reception, accountant, doctor, pharmacist and others) has its own permissions, access can be limited to branches, and a clinic doctor sees only their own patients' clinical records.
- ChamberBD support: two ChamberBD administrators can open an account to help with support. This access is not yet recorded in a log you can review.
Services that receive data
| Service | What for | What it receives |
|---|---|---|
| Hetzner Online | Server hosting (Helsinki, Finland) | Everything stored in ChamberBD |
| Cloudflare | DNS, HTTPS and content delivery | All traffic to ChamberBD sites and apps |
| OpenAI | Chamber AI (optional dictation assistant in the doctor app) | Text the doctor dictates and the prescription draft's notes (complaints, history, diagnosis, investigations, advice). We keep these AI requests for 90 days to fix problems; ChamberBD administrators can read them. Do not dictate patient names or phone numbers. |
| "Sign in with Google" (Firebase); website analytics | Sign-in identity of doctors who choose Google sign-in; usage analytics on our websites and apps | |
| Resend | Emails to doctors and clinic users (sign-up codes, account messages) | |
| Meta, Microsoft Clarity | Advertising measurement, usage recordings | Loaded only after you accept analytics cookies |
| BulkSMSBD | SMS to patients, when a doctor turns it on | Patient phone number and the message text |
We do not process card payments. Subscription payments are made by bKash or Nagad and recorded by transaction ID.
Your data: export, sharing, closing an account
- Export: lists and reports in the dashboard — appointments, patients, prescriptions, payments, expenses — can be downloaded as CSV. A complete one-click export of an account is not available yet; email us and we will prepare one.
- Prescription links: a shared prescription opens at an unlisted address and is marked so search engines do not list it. Anyone who has the link can open it, so share it only with the patient.
- Free prescription generator: works in your browser; if you create a share link, it is deleted after 7 days.
- Deleting records: patient records and prescriptions cannot be deleted from the dashboard today.
- Closing an account: email support@chamberbd.com. We deactivate it: sign-in and the public profile and booking pages stop. Tell us if you also want the data deleted and we will confirm what is removed.
Not covered yet
We do not claim these, because they are not in place or cannot be shown yet. Each one will be added to this page only when it is:
- Automated, off-site database backups with tested restores.
- Encryption of stored data (database and uploaded files) at rest.
- Encryption between Cloudflare and our server.
- An access log of who viewed or changed records, including ChamberBD support access.
- Self-service deletion of patient records and accounts, and automatic retention schedules.
- A documented incident-response and breach-notification process.
Report a security problem
Email support@chamberbd.com with the subject "Security report". Please do not test against real patient data; tell us what you found and we will respond.
Questions
Who owns the patient records I enter?
You do. ChamberBD stores them to run the service for you. We do not sell, rent or trade personal or medical data.
Can ChamberBD staff see my patients' records?
Two ChamberBD administrators can open an account to provide support. We do not yet keep an access log that you can review, so ask us before support access if that matters to you.
How long is data kept?
Records are kept while your account exists. Automatic deletion schedules are not in place yet; email us to close an account and we will tell you exactly what happens to its data.
What happens if the internet or ChamberBD goes down during a chamber?
After a one-time offline setup, the doctor dashboard keeps letting you write prescriptions, take appointments and see the prescription list without a connection, and syncs when it returns.
Is my data stored in Bangladesh?
No. ChamberBD's servers are in Hetzner's data centre in Helsinki, Finland (European Union).