Data Security
Protecting your sensitive information is our highest priority.
Last updated: April 9, 2025
Traditional Chinese Medicine practitioners trust DaoBook with the safekeeping of confidential patient records every day. We understand this responsibility deeply—security isn't just a feature for us, it's fundamental to everything we build.
Your Data Ownership
We are the custodians of your data, but you remain the owner. Every measure has been implemented to help you manage your information securely and confidentially. If you ever decide to leave DaoBook, your data will be held for 90 days after cancellation, allowing you to return seamlessly if you change your mind.
You can export your data at any time using DaoBook's comprehensive export features, giving you complete control over your information.
Your patient data is yours—we just help you protect it.
How We Protect Your Data
Secure Infrastructure
DaoBook is hosted in state-of-the-art data center facilities with multiple layers of security protection:
- Physical access controlled by professional security staff
- Continuous video surveillance and intrusion detection systems
- Redundant power supplies and environmental controls
- Network security including firewall protection and regular penetration testing
Encryption
Your data is protected with industry-standard encryption:
- All data transmitted between you and DaoBook is secured using HTTPS (TLS 1.2+)
- We use a 2048-bit SSL certificate for encryption in transit
- All data is encrypted at rest using AES-256 encryption
- Encryption keys are managed securely and rotated regularly
Availability and Reliability
We've built DaoBook with reliability in mind:
- Our infrastructure is designed with redundancy at every level
- In case of a failure, automated processes redirect traffic to functioning systems
- 24/7/365 monitoring with alerts for unusual patterns or potential issues
- Regular performance testing to ensure optimal operation
Backup Strategy
We protect against data loss with comprehensive backup procedures:
- Full data backups performed daily
- Backups are encrypted and stored redundantly in multiple physical locations
- Data is continuously replicated to standby databases for near-instant recovery
- Regular backup testing to verify restoration capabilities
Data Storage Location
All DaoBook data is stored on secure servers in Australia, helping you maintain compliance with Australian data sovereignty requirements and minimizing latency for Australian users.
DaoBook is designed to meet or exceed the requirements of the Australian Privacy Principles and other relevant Australian healthcare data regulations.
Protecting Your Account
As a healthcare practitioner, you play a crucial role in maintaining security. Here are steps you can take to protect your DaoBook account:
Enable Two-Factor Authentication
Add an extra layer of security by enabling 2FA, which requires both your password and a temporary code generated on your smartphone to access your account.
Create Strong Passwords
Use a unique password for your DaoBook account. Consider using a passphrase or sentence that's easy for you to remember but difficult for others to guess.
Manage User Access
Use DaoBook's user role system to control who has access to sensitive information. Only grant the permissions necessary for each staff member's role.
Keep Software Updated
Ensure your web browser, operating system, and devices are regularly updated with the latest security patches to protect against vulnerabilities.
Secure Your Network
Access DaoBook only on secure networks. Avoid using public Wi-Fi for sensitive healthcare tasks, or use a VPN if you must connect remotely.
Log Out When Finished
Always log out of your DaoBook account when you're done using it, especially on shared or public devices, to prevent unauthorized access.
Healthcare Compliance
DaoBook is designed to help you meet your compliance obligations. Our platform includes features to support your adherence to:
Australian Privacy Principles
DaoBook helps you meet your obligations under the Australian Privacy Principles with features that:
- Record patient consent to your practice's privacy policy
- Provide tools to manage and correct personal information when requested
- Secure data with appropriate technical safeguards
- Facilitate data export when needed for compliance
- Support appropriate data retention and deletion practices
While DaoBook provides these tools, you remain responsible for using them appropriately in your practice. We recommend consulting with a healthcare compliance professional to ensure your specific obligations are met.
Our Security Commitment
Security isn't a checkbox for us—it's an ongoing commitment. We continuously monitor, test, and improve our security measures to protect your practice and patient data.
If you discover a potential security issue, please let us know immediately at admin@daobook.com.au.
Contact Us
If you have questions about our security practices or need assistance with securing your DaoBook account, please contact us at: admin@daobook.com.au