Freemi / Security
Security

Healthcare software should earn your trust.

Freemi is designed around controlled access, clear permissions, operational visibility and responsible use of automation.

Book a demoTalk to us
Access

Permission is enforced, not implied.

Roles, on the server

Roles are enforced on the server, not by hiding a button in the interface. Someone without permission is refused, and the attempt is logged.

Who sees what

Access to patient information follows the role, so a member of staff sees what their job needs and not the rest of it.

Accounts

Accounts are created and removed by you. When someone leaves, their access goes with them and the record of what they did stays.

Visibility

A trail you can actually use.

An audit trail is worth nothing if you cannot get it out. Freemi records the detail and lets you export it.

Every important action

Actions carry an actor, a timestamp and the values before and after, so the question is never who changed this.

Consent, versioned

The wording shown to the patient, their response, the date and the channel, all kept together and searchable.

Exportable

The trail comes out as a file. You do not have to raise a ticket with us to see your own history.

Control

You decide what runs on its own.

Set per workflow

You choose, workflow by workflow, what Freemi answers on its own and what it hands to a person. Your team signs that off before anything reaches a patient.

Judgement stays with people

Anything requiring professional judgement is routed to an authorised person rather than answered automatically. Freemi drafts, your team sends.

Sensitive work can be restricted

Where a workflow should never run unattended, you can require an approval and the system will hold it until someone gives one.

Your data

It is yours, and you can take it.

There is no minimum term. If Freemi stops earning its place you can leave, take your data with you, and we delete our copy.

For detailed information about Freemi’s data processing, hosting locations, retention periods and contractual terms, contact the Freemi team and we will put it in writing. We would rather answer the specific question your practice has to answer than publish a badge.

What we will not claim

The lines we do not cross.

We do not certify anyone

Freemi does not verify professional registration, and no software makes a practice compliant. What it can do is keep the record accurate as you work.

We do not replace clinical judgement

Anything requiring professional judgement goes to a person, and the audit trail shows which was which.

We do not invent numbers

You will not find a percentage on this site that we cannot stand over. That is why there are fewer of them than you might expect.

Ask us the awkward question.

Bring the security question your practice actually has to answer, and we will give you a straight answer in writing.

If something goes wrong

How we handle an incident.

Every vendor has a security page. Fewer will tell you what happens on the bad day, so here it is.

1
We tell you

If something affects your business, you hear it from us rather than working it out yourself. We would rather make an awkward call early than a worse one late.

2
We contain it, then explain it

Stopping it comes first. A plain-English account of what happened, what was affected and what we changed follows, in writing.

3
You get the trail

The audit record is exportable. If you have to account for something to a regulator or a patient, you are not dependent on us to reconstruct it.

4
We fix the cause

Not just the instance. If a rule let it happen, the rule changes, and we will tell you what changed.

Questions we get asked

The security questions buyers actually send.

Do you hold clinical records?

For Practice, treatment notes live in Freemi and are controlled by authorised practitioners, going draft, then signed, then locked. For Pharmacy, clinical records stay in your dispensing system; Freemi holds the operational relationship around it.

Can staff export patient data?

Only where their role allows it, and the export itself is an action with an actor and a timestamp attached. You can see who took what, and when.

Do you have certifications?

We are not going to put a badge on this page that we cannot stand over. What we will do is answer the specific question on your security questionnaire, in writing, including where we fall short.

What about our own obligations?

No software makes a practice compliant, and we will never claim otherwise. Freemi keeps the record accurate and the trail exportable so that meeting your obligations is a smaller job than it is today.