Enterprise Security, DR & Architecture

All medical records, doctor consultation notes, prescriptions, and financial ledgers are encrypted at rest using AES-256-GCM. All HTTP/API traffic strictly enforces TLS 1.3 with Perfect Forward Secrecy. Cryptographic keys are rotated automatically via HSM-backed key vaults compliant with NIST SP 800-57.

Immutable, append-only audit logging captures every user action across clinical, pharmacy, and billing workflows. Each log records authenticated User ID, timestamp (UTC / East Africa Time), client IP address, action performed, and affected record identifier. Audit logs are cryptographically sealed to prevent tampering.

Continuous automated 3-2-1 backup topology: 3 copies of data, across 2 different media formats, with 1 copy stored in a separate geographical availability zone within Kenya. Recovery Point Objective (RPO) is strictly under 1 hour, and Recovery Time Objective (RTO) is under 4 hours.

High-availability multi-zone cluster deployment with automatic failover and offline-tolerant client caching for brief local internet outages. Regular automated DR test exercises confirm system restoration runbooks remain verified for continuous healthcare operations.

100% In-Country data hosting in certified Tier-3 Kenyan facilities, fulfilling Section 48 & 49 of the Kenya Data Protection Act 2019. Native support for HL7 FHIR R4 and AfyaConnect APIs for real-time integration with Kenya's National Health Data Highway and Social Health Authority (SHA).