Infrastructure
Files are stored on Google Cloud with encryption in transit and at rest. Authentication uses JWT tokens; passwords are hashed with bcrypt.
Trust
Security and privacy for your medical information
Encryption, access controls and HIPAA-aligned practices designed for long-term medical use.
Encrypted and access-controlled
You decide who sees your medical records
- Google Cloud encryption
- Access you can withdraw
- Explicit AI consent
MedFiles is built so patients control their data. We use industry-standard encryption, audit logging for account security and explicit consent for AI processing.
Access and sharing
Only you choose who receives your documents. Doctors see the profiles you explicitly connect or share. Our own staff access is limited to platform operations, and every request is checked against the role behind it.
Compliance-oriented design
We implement HIPAA-aligned administrative and technical safeguards. Review our privacy policy and terms for data processing, subprocessors and your rights.
- Patient-controlled sharing and revocation
- AI consent stored in your account record
- Account security and activity audit logs
- Revoking a share or removing a profile never deletes the medical documents behind it
Your records, your rules
Read our privacy policy or start securing your documents today.
Create free account