Where your records are kept
Scriptis is hosted in the UK, in SiteGround's London data centre. Each clinic's records are kept in its own separate, private area of the server, outside the public website, and are never mixed with another clinic's.
Encryption
Everything sent between your device and Scriptis is encrypted (HTTPS). Client records are also stored encrypted, so the files on the server can't be read on their own.
Signing in
- Sign in with Face ID, a fingerprint or a password.
- An account locks after 3 wrong passwords, and the owner is emailed an unlock link.
- Scriptis locks itself after 15 minutes without use.
- Everyone is asked to choose a new password every 60 days.
- The owner is emailed when someone signs in from a new device.
- Forgotten passwords are reset with a one-time link that expires.
- On Pro, every member of staff has their own login and role, so people only see what they need to.
Who can see your records
Only you and the staff you give a login to. Scriptis staff can't open your client records. If you need help, you can switch on support access from your settings for 4 hours, and it switches itself off again.
Audit trail and backups
Scriptis records who viewed or changed each record, and when, so you can answer any question from a client, insurer or regulator. Your records are backed up every day, and you can download a full copy at any time.
Card payments
Card payments are taken by Square, Stripe or SumUp on their own secure pages. Card numbers never pass through or get stored in Scriptis.
UK GDPR
Your clinic stays in control of its clients' data. Scriptis only handles it on your behalf, under the data processing agreement in our terms. If there is ever a data breach that puts your information at risk, we will tell you without delay. Read our privacy policy.
Reporting a security concern
If you think you've found a security problem, please email hello@scriptis.co.uk with "Security" in the subject. We'll reply within one working day.