OperHand Security

How OperHand protects the information pharmacies entrust to it. A plain statement of the controls in place at the version date above. It is not a certification and not a warranty: controls may change, and the Customer Agreement governs. How personal information is handled is set out separately in our Privacy Policy.

• Encryption: Data is encrypted in transit and at rest.
• Separation: Every pharmacy's data is isolated; every query is scoped to one pharmacy.
• Access: Four fixed roles enforced server-side. Multi-factor authentication is mandatory on OperHand's own administrative accounts, and available to pharmacy accounts, which each pharmacy may require of its own staff.
• Support access: Access to patient records is off by default, granted for a specific pharmacy, for a limited time, with a recorded reason, and every access is logged.
• Audit log: Append-only; never edited or deleted.
• Patient links: Single-use for signing, date-of-birth verified, rate-limited, expiring.
• Messages: Emails and texts contain no medical detail.
• Bill: Runs only as directed by a named member of pharmacy staff, whether started or scheduled by them, and acts under that person's identity. Everything it sends to the Service, including diagnostic reports when it encounters something it does not recognize, is protected as patient information.
• Storage: United States, with service providers each under a written data-protection agreement.
• Backups: Provider point-in-time recovery.
• Assurance: an internal privacy and security assessment maintained by OperHand. This statement is the means by which our safeguards are described to customers; security questionnaires, assessments and on-site audits are not provided.

OperHand is a business name of Heaven Surge Inc., Ontario, Canada.