Your health data stays yours.
How Galeno protects patient health data, who can see it, and how our AI uses it.
- Encryption in transit
- TLS on every connection
- Sharing
- Only with the patient's consent
- Record views
- Every view is logged
- Data sales and ads
- Never
Consent at every step.
- Step 1
Patient picks sections
Profile, conditions, medications, reports, each opt-in.
- Step 2
Clinic gets a scoped link
Doctors see only what was shared.
- Step 3
Every view is logged
Galeno records which doctor opened the record and when.
- Step 4
Revoke at any time
Access ends the moment the patient pulls it back.
How we protect data.
Security is built into the platform, not an optional setting.
Encrypted in transit
All traffic to Galeno uses TLS.
Secrets in a vault
Keys and credentials live in a dedicated vault, never in code.
Role-based access
Owners, admins, doctors and patients each see only what their role allows.
Organisation isolation
Each clinic's workspace is kept apart from every other.
Audit trail
Every record view is recorded with who opened it and when.
How our AI handles health data.
Information, not diagnosis
Galeno explains the data. Treatment decisions stay with the patient and their doctor.
Grounded in the record
If an analysis cannot be generated, Galeno says so. It never fills the gap with invented findings.
Only with permission
Clinician AI summaries need the patient's grant. Revoke it and the summary stops.
Service providers
Report files are read by Google (Gemini and Cloud Vision) and OCR.space, which return only the extracted text and values.
- See and change your information in the app.
- Stop sharing with any clinic, at any time.
- Ask us for a copy of your data.
- Ask us to delete your account and data.
Found a security issue?
Tell us. We look into every report and reply to the person who raised it.
Report an issue