Security
Security and data protection for patient data
Treatment plans, X-rays and patient details are special category personal data. We built DentalPlan for the clinics that are responsible for them.
Clinic data is kept apart
- Every clinic sees only its own patients, plans and files; data is separated per clinic at query level.
- Deleted records are first marked as deleted, so accidental deletions can be undone.
Roles and permissions
- Deleting patients or plans, editing the catalog and prices, creating patient links, approving discounts and managing the team are separate permissions.
- Dentists, assistants and coordinators get only the permissions their work needs.
Audit log
- Who changed what, when, on which patient or plan — on one screen in the panel.
- Discount requests and approvals are logged too.
Sign-in security
- Passwords are never stored in plain text; they are hashed with PBKDF2-SHA256, 100,000 rounds.
- After 5 failed attempts in a row the account locks for 15 minutes; forms and sign-in are rate limited.
- Sessions use short-lived access keys and refresh keys.
You control patient links
- Give a link an expiry date or switch it off at any time.
- Optionally, the patient must confirm the last 4 digits of their phone number to open the plan; wrong attempts lock the link for a while.
- You see how many times a link was viewed.
Your data stays yours
- On request, all of your clinic’s data is exported.
- When the agreement ends, your data is permanently deleted on request.
Who does what under data protection law?
Clinic: data controller
Informs its patients, obtains the consent required and decides what the data is used for.
DentalPlan: data processor
Processes the data only to provide the service, on the clinic’s instructions, keeping clinics apart.
Patient: data subject
Exercises their rights by contacting the clinic that treats them.
Contact us for details on hosting location, backups and the data processing agreement. Contact
Let’s try it in your clinic
Leave your details and we will show you DentalPlan with your own treatments.