We handle health data for elderly residents — we take that seriously. Here's a plain-language overview of how we protect the information of clients, residents, and care facilities using the platform.
🔒 Encryption
All communication between your browser and our servers is encrypted (HTTPS/TLS) — including over public or shared Wi-Fi. Passwords are never stored in plain text: we use modern key-derivation algorithms specifically designed to resist cracking attempts even if the database were compromised. Digital certificates used for document signing are protected by their own encryption layer, with a password required on every use — never stored.
Continuous backup
Automated backups with geographic redundancy — stored in more than one location, including off the primary server. We periodically test that backups actually restore, not just that they exist.
Web application firewall
Malicious traffic is filtered before it even reaches the system — including protection against the most common types of web application attacks (code injection, malicious scripts, etc).
Antivirus scanning
Every file uploaded to the system (prescriptions, documents, photos) is automatically scanned for viruses and malware before being accepted.
Active defense
Repeated unauthorized access attempts (brute force, automated scanning) are detected and blocked automatically, in real time.
Rate limiting
We limit how many login attempts and sensitive actions can happen in a short period — this hinders automated attacks without affecting normal use of the system.
Continuous monitoring
Automated systems check the platform's health and integrity 24 hours a day, with immediate alerts to our team for any anomaly.
Access control
Each person only sees and does what their role allows — pharmacist, nurse, physician, and client have different, audited access levels.
LGPD compliance
We handle personal and health data following Brazil's General Data Protection Law (LGPD), with specific purpose and access restricted to those who genuinely need it.
🔍 Responsible vulnerability disclosure
If you're a security researcher and found a vulnerability in SerIntegra, we want to know — and we appreciate you notifying us before making it public. We follow the security.txt standard (RFC 9116).
