Patient information, handled the way the law expects.

Health information is special personal information under POPIA, and the HPCSA and the National Health Act add their own rules. SafeNexus Practice is built around them.

• Your practice is the responsible partyYou decide what is collected and why. SafeNexus is your operator: we process patient information only on your instructions, under a written operator agreement.
• Consent, recordedEach patient record keeps what the patient agreed to, when, and how: on a signed form, at reception or when booking online. Messages and marketing are separate choices.
• Only the right peoplePractice managers, practitioners, nurses, reception and billing each see what their role needs. Every practice's information is kept apart from every other practice's.
• An audit trailOpening or changing a patient record is written to a log that cannot be edited: who, when, and which fields changed, but never the values.
• Nothing is quietly deletedRecords are kept, not erased, in line with HPCSA guidance on keeping patient records. Clinical notes will lock once signed; changes become dated additions.
• No medical detail in messagesConfirmations and reminders give the time and place only. Results and diagnoses are never sent by WhatsApp, SMS or email.
• Messages people can stopEvery SMS and WhatsApp message says how to stop them. Marketing only goes to patients who opted in to it.
• Your data stays yoursExport every patient and appointment at any time, and take it all with you if you leave.
• Sign-in protectionPasswords of at least ten characters, accounts that lock for 15 minutes after five wrong tries, and sign-ins that expire and renew securely.
• A breach planIf something goes wrong we tell your practice without delay, so you can notify the Information Regulator and patients as POPIA requires.

This page describes how the product works. It is not legal advice; speak to your own adviser about your practice's obligations.