How your patients’ data is kept safe

Where your data lives

Your clinic's data is kept in the UK, in a database in London, with files in private storage in the same region. Every connection to Hally is encrypted.

Kept apart from other clinics

Each clinic's data is kept apart by the database itself: every query is limited to one clinic, so one clinic can never see another's records.

Encrypted with your clinic's own key

Clinical notes, form answers, messages and connection details are encrypted with a key that belongs to your clinic alone.

Who can see what

Staff sign in with a password and two-step sign-in, and are signed out after 30 minutes without use. Roles decide what each person sees: reception can't read clinical notes, for example. Every view or change of a patient's record is written to an access log that can't be edited, which the owner can download.

The paperwork

The data processing agreement is accepted when you sign up, and Settings → Account gives you your own copy and a DPIA already filled in with how Hally works, for you to complete for your clinic. The suppliers we use to run Hally are listed in the agreement, and owners are told before that list changes.

Patient data never leaves for logs or AI

Patients' details are never written to logs. The AI features only get counts, service names, your own procedures and this help, never a patient's name or contact details.