Security and privacy
Your practice’s data, kept with the care it deserves.
Clinical records are protected by professional confidentiality. That is why, at Theravus, security is not an add-on — it is the foundation of everything we build. Here is, in plain language, how we protect your practice’s and your patients’ information.
How we protect it
Protection at every layer, from login to backup.
-
Data stored in Brazil
Your practice’s information is stored in data centers in Brazil, on world-class cloud infrastructure.
-
Encrypted in transit and at rest
Everything travelling between your device and Theravus is encrypted. Data stays protected at rest too — and the most sensitive fields get an extra layer of encryption.
-
Automatic backups
We run frequent automatic backups, stored separately from the main system, so information can be recovered if something goes wrong.
-
Everyone sees only what they need
Role-based access: professionals, assistants, front desk and managers only see what their role requires. You decide who joins the team and what each person can do.
-
Confidentiality between professionals
In a clinic, one professional’s clinical notes are not open to the others. The record belongs to whoever provides the care — and no one else without authorization.
-
Access log
The system records who accessed and what changed in sensitive information. Traceability for you and your clinic.
-
Protected sign-in
Sign in with Google, Microsoft or Apple, two-step verification by email, bot protection and sessions that expire on their own.
-
Legally valid digital signatures
Prescriptions, medical certificates and reports can be signed with an ICP-Brasil digital certificate, and anyone can verify the document’s authenticity.
Artificial intelligence
The AI helps you — without knowing who your patient is.
Theravus Cowork works with clinical information stripped of the data that identifies the patient. Names, documents and contact details are removed before any AI processing, and your practice’s content is not used to train third-party models.
- Identifiable data is removed before it reaches the AI
- AI suggestions only go into the record once you confirm them
- You decide when to use it — the AI is a tool, not a shortcut
LGPD
Compliant with Brazil’s LGPD and professional confidentiality.
The professional or clinic is the controller of patient data; Theravus is the processor and handles that data only to provide the service. We never sell data — anyone’s.
Data subject rights
- Access to data
- Correction
- Portability
- Deletion
- Withdrawal of consent
- Information on sharing
Availability
Up and running when you need it.
We monitor the platform around the clock and publish its status in real time. Updates go live without taking the system down, so your appointments are never interrupted.
Talk to us
Questions about security?
Security team, data protection officer (DPO / LGPD) and responsible vulnerability disclosure: reach us on WhatsApp or through the website’s contact page.
Found a vulnerability?
Tell us before disclosing it. We respond quickly and fix it as a priority. We only ask that you do not access other people’s data or make the issue public before it is fixed.
Report a vulnerability