Data Security

2 Our Security Commitment

At AZRI, data security is a core pillar of how we design and operate our platform. We are committed to protecting user data and health information from unauthorized access, loss, modification, or misuse.

3 Encryption

We employ appropriate encryption technologies to protect data in transit between the user and the platform, and to safeguard sensitive data at rest, wherever technically feasible and appropriate to the nature of the data.

4 Access Control

Data access is restricted based on roles and permissions. Users, staff, and systems can only access the data needed to perform their authorized tasks.

Access control mechanisms include:

• Role-based permissions.
• Secure authentication.
• Session management and timeout controls.
• Periodic access reviews.
• Ability to disable or restrict accounts upon suspicion of a security risk.

5 Health Data Protection

Given the sensitivity of health data, we apply additional safeguards including:

• Isolation of sensitive data.
• Minimizing unnecessary access.
• Logging access and modification events.
• Reviewing suspicious activities.
• Applying internal controls for staff and third-party providers.

6 Monitoring & Auditing

We monitor our systems to detect unusual access attempts, security errors, and suspicious activities. We maintain technical logs that help us investigate incidents and continuously improve our security posture.

7 Backup & Business Continuity

We maintain appropriate backup and recovery procedures to help protect data and ensure service continuity in the event of technical failures or unexpected incidents.

8 Third-Party Service Providers

When using third-party service providers for hosting, storage, notifications, analytics, or payments, we select providers that apply appropriate security standards and commit to responsible data handling.

9 Security Testing & Improvement

We periodically review our security configurations and work to update systems, libraries, and software to address vulnerabilities and reduce risk.

10 User Responsibility

Users play an important role in protecting their accounts. We recommend the following:

• Use a strong and unique password.
• Never share your login credentials with anyone.
• Sign out from shared or public devices.
• Notify us immediately if you suspect any unauthorized account activity.
• Keep your application or browser up to date.

11 Reporting Vulnerabilities or Incidents

If you discover a security issue or suspect unauthorized access to your account, please contact us immediately at:

Please do not exploit any vulnerability or publicly disclose its details before we have had the opportunity to verify and address it.

12 Security Limitations

While we apply appropriate security measures, no digital system can guarantee 100% security. We continually work to improve protections and reduce risk, and encourage users to follow good security practices on their end.