EN
EnglishENItalianoITSvenskaSV
Try the demo Demo
Back to VetcoreSecurity and privacy at Vetcore

Security and privacy at Vetcore

Data protection is built in. Not added as a badge.

When someone entrusts a clinic with their pet’s story, that trust matters. We have invested in real security decisions throughout the software, not simply a line in the footer.

Verified accessPrivate by defaultAccountable sharing

Designed into the product

Protection lives in the details.

Our controls span identity, permissions, clinical files, patient histories and the rights of people using the service.

01

Access is checked at the source

A clinic membership and an authenticated identity are required for protected workflows. Database-level tenant rules and role-checked operations help prevent one practice from reading another practice’s records.

02

Private clinical documents

Clinical files sit in private storage. Viewing or downloading requires an access check first, followed by a short-lived signed link. Uploaded document formats, size and file content are validated server-side.

03

Owners see only what is shared

A clinic decides which records a connected pet owner can see. Vaccination and MRI/ultrasound records start private; sharing is deliberate, and edits require renewed approval before those details become visible again.

04

Changes leave an audit trail

Key clinical changes and sharing decisions create audit events. A version check also stops a stale approval screen from publishing a medical record after another user edits it.

05

Privacy rights have a real workflow

Signed-in pet owners can submit access, correction, erasure and other privacy requests and track their status. Platform administrators have a restricted review inbox to record responses.

06

Deletion is designed to be recoverable

Owner-account deletion records a secure cleanup job before sign-in removal. Private personal pet profiles and photos, including stray uploads, are scheduled for cleanup and retry if a step fails. Clinic-held records follow their separate legal obligations.

A thoughtful extra step

The Service PIN. A real second check when it matters.

Vetcore includes an additional six-digit Service PIN mechanism that helps veterinary staff verify a pet owner in supported clinic-service interactions. It is separate from account sign-in — not a replacement for passwords or identity checks.

  • Cryptographically generated six-digit codes, rather than predictable sequences.

  • PIN material protected with server-side AES-256-GCM encryption and a separate HMAC-SHA-256 verifier.

  • Controlled verification attempts, including temporary lockouts, with a way for the owner to rotate the PIN.

The Service PIN is an extra verification measure in supported interactions; it does not make anyone’s entire medical record accessible or replace account authorization.

The engineering, not the marketing

Measures that can be explained.

Privacy and security require both software controls and responsible human operations. Here is how we approach the technical side.

  1. 01

    Reduce unnecessary exposure

    Make clinical records private, restrict what optional tools return by default, and avoid sending identifying error details to optional telemetry.

  2. 02

    Verify before granting access

    Use authenticated, role-aware server checks instead of trusting which page or invitation link somebody opens.

  3. 03

    Design for mistakes and recovery

    Record sensitive decisions, protect shared medical-record revisions and create retryable account-deletion work rather than silently losing failed cleanup.

  4. 04

    Keep testing and reviewing

    Automated build and privacy regression checks support ongoing review. They complement — not replace — live security testing, contracts and operational controls.

Clear about what is — and is not — verified

GDPR is a responsibility, not a decorative certificate.

These are implemented technical measures, not a claim of independent certification or completed legal compliance. GDPR readiness also requires verified processor agreements, lawful bases, retention schedules, operational testing and clear responsibilities between Vetcore and veterinary clinics. Those items are subject to ongoing verification. We will not describe outstanding steps as completed.

There is no universal official “GDPR certified” badge conferred simply by building secure software.

Security and privacy at Vetcore

Your privacy, your say.

Pet owners can use their Vetcore account to submit privacy requests. Veterinary clinics remain responsible for their own clinical records and applicable retention decisions.

Open pet-owner account Explore Vetcore for clinics

Security features shown reflect current implemented software designs; availability can depend on account permissions and configured services. No system can promise zero risk.