Security & Trust

How we protect clinic accounts, patient communications, and platform reliability.

Access Control

Clinic portals use authenticated accounts with role-based permissions so staff only see what their role allows.

Encrypted Transport

Clinic and public patient-facing sessions are designed to run over HTTPS so data in transit is encrypted.

Message Accountability

SMS Gateway delivery tracking and communication history help clinics audit what was sent and when.

Platform Controls

  • Authentication: Username/password clinic login with account isolation per clinic
  • Authorization: Role-based clinic users (manager, ECP, staff, admin) and feature toggles
  • API credentials: Gateway API keys scoped to the clinic’s authorized business number
  • Operational monitoring: Queues and delivery statuses to detect failed or undelivered messages
  • Support access: Support staff assist clinics through controlled support channels

Data & Privacy Alignment

EyeconX is built for clinics in Canada and the United States. We design the product so clinics can manage communication preferences, unsubscribe options, and consent-aware outreach. Clinics remain responsible for complying with applicable privacy laws (such as PIPEDA in Canada and provincial health privacy rules where they apply) when messaging patients.

Read our Privacy Policy for details on collection and use.

Reliable Delivery

  • Queued outbound messaging for durable SMS send paths
  • Delivery lifecycle statuses for clinic visibility
  • Failed-message recovery tools in the clinic portal
  • Email domain authentication options to improve deliverability

Your Responsibilities

  • Use strong passwords and limit admin access to trusted staff
  • Keep PMS integrations and contact data accurate
  • Configure patient preferences and obtain required consents
  • Report suspected account compromise immediately to support

Report a Concern

Security or privacy questions: support@eyeconx.net · 1-866-533-2669 ext. 706