Security and access
Clinic-scoped access
Access is limited to the relevant clinic and authorised user.
Security and access
Everyone can use the system; not everyone can see everything.
Stokontrol supports controlled clinical work through role-based access, tenant isolation and traceable activity.
Security and access
Secret protection
Private service credentials are never returned to the browser.
Security and access
Traceable history
Where appropriate, activity history is retained instead of silently deleting evidence.
Security and access
Secure sign-in and redirects
Once two-step verification is enabled, the workspace stays closed until the authenticator code is complete; post-login redirects remain limited to trusted application paths.
Security and access
Auditable actions
Critical operations are recorded in a reviewable form.
Security and access
Minimum disclosure
Platform administration does not expose patient clinical detail in its product surface.
Security and access
Signed webhook verification
Training live-provider notifications are signature-verified; forged notifications are rejected.
Security and access
Private file access
Clinic files are not stored in a public bucket; authorised access uses time-limited signed URLs.
Clear disclosure
A security approach is not a legal-compliance guarantee.
This page explains the technical approach. Regulatory compliance must also be assessed against each clinic's processes and applicable law.
Can one clinic see another clinic's data?
No. Clinic context and server-side authorisation are checked for each protected access.
Can permissions be changed?
An authorised clinic administrator may adjust permissions; critical actions remain protected on the server.
Are patient files public?
No. Clinical files use authorised access and private storage rules.
Is Stokontrol ISO 27001 certified?
No. This page explains technical controls. It does not claim a valid ISO/IEC 27001 certificate and is not a legal security guarantee.
Data export, backups and support
Authorised in-account data exports have a different scope from system backups and restoration. Confirm the scope you need in writing before proceeding.
CSV and Excel exports
Authorised in-account exports offer CSV for one dataset and Excel (.xlsx) for one or more datasets. Options cover patient and health records, clinicians and team, appointments, treatments and plans, stock and lot movements, finance, laboratory work, tasks, communications, document records and permitted audit history. Scope follows the clinic data your role may access and the operation limits; document records contain file metadata. This is not a full backup of every file and the system.
Backup and restoration scope
Ask support for written information about backup frequency, retention, recoverable scope and target recovery time. This page does not promise a particular backup interval, zero data loss or a guaranteed restoration time.
Support, timing and fees
Request support through Help in your account or info@stokontrol.com. Confirm the scope, delivery time and any fee for a special export or restoration request in writing before proceeding. No fixed response time or promise that every request is free is made here.
Safe start
Try the product before setting up your clinic.
The public demo is isolated from real clinic data. Account setup is a separate controlled flow.