Where your data lives, who can see it, and what happens when something goes wrong.
The questions a hospital board, a permanent secretary or an auditor asks before signing, answered in one place.
You choose where the data lives.
Every Avis product can run in the cloud on servers we operate, on a server inside your own network, or both with the on-premise copy as the primary. The exact hosting location is written into your contract.
- Cloud: hosted and monitored by Avis, reachable from any site
- On-premise: installed on your hardware, data never leaves the building
- Hybrid: local server for daily work, cloud copy for continuity
Daily, encrypted, and actually restored.
A backup that has never been restored is a guess. Ours are taken every day, encrypted before they leave the server, kept for thirty days, and a restore is run and checked every month.
- Daily encrypted backups
- Restore to any day in the last 30
- Restore tested monthly, with a written result
Who can see what, and a record of who did.
Users are assigned roles per module, so a cashier does not see the ward and a lab technician does not see billing. Every view and edit of a record is logged with the user and the time.
- Role-based access per module
- Audit trail of views and edits, by user and time
- Multi-factor authentication available on request
In transit and, for personal data, at rest.
All traffic between browsers, phones and servers is over TLS. In Glide HMIS, personal identifying fields are encrypted at rest with AES-256-GCM, so a copy of the database on its own does not expose patient names or contact details.
- TLS for every connection
- AES-256-GCM at rest for personal fields in Glide HMIS
- Encrypted backups
Set up so you can comply.
The Act applies to every system we run and we provide our compliance documentation with the security questionnaire. Under the Act you remain the data controller for your patients, staff or customers; our products give you the exports, access logs and deletion tools you need to answer a subject access request.
- Processing agreement and compliance documentation on request
- Full data export in standard formats at any time
- Deletion on request and at the end of a contract, with confirmation
Who you call, and how fast we answer.
Report anything that looks like a breach or an outage to info@itsolutionsuganda.com or +256 742 020 610. We contain first, then tell you what happened, what was affected and what we changed. Confirmed personal-data incidents are reported to you as soon as they are confirmed, within the timelines the Act sets.
- One contact point for security and outages
- Written incident report after every event
- Response times published on the service levels page
What this site collects about you
Separate from the software. This is about the pages you are reading now.
- Which pages and buttons worked
- We record that a page was opened or a button pressed, with the path, the site you arrived from and whether you are on a phone or a desktop. No cookie, no name, no account, and it stays on our own server in this country.
- Heatmaps and session replay
- We use Microsoft Clarity to see where people click and where they give up, which is how the pages get better. It sets its own cookies and the recording is held by Microsoft rather than by us. Text you type is masked in the browser before anything is sent.
- Where it is switched off
- Session replay does not run on the administrator area or on the checkout. One would record other people's contact details on screen, the other a payment. Neither is ours to record.
- What we do not do
- No advertising trackers, no selling or sharing of anything collected here, and no attempt to identify you across other websites. If you write to us, what you send is kept to answer you and nothing else.
Questions to ask any vendor
Including us. We will answer each of these in writing, and we suggest you put them to every other bidder.
- Where exactly is the data hosted, and can you show me the server?
- Can I get a complete export in a standard format, today, without asking twice?
- When did you last restore a backup, and did it work?
- Which of your staff can read my data, and is that logged?
- Are you registered with the Personal Data Protection Office?
- What happens to my data when the contract ends?
- Does it keep working when the internet goes down?
Need it on paper for a tender or a board?
We keep a completed security questionnaire covering hosting, backups, access, encryption and data protection. Ask and we will send it the same day.
info@itsolutionsuganda.com · +256 742 020 610