Security you can check
SnapMedic is built for clinicians and the organisations who support them. Here is what we hold, how we look after it, and how to tell us if something looks wrong.
Cyber Essentials certified, hosted in London
- Cyber Essentials certified
- Certified 6 October 2026 under the UK government-backed scheme, covering the whole company. Check the live certificate with the badge.
- Hosted in London
- Organisation data is held in the UK, in data centres that hold ISO 27001 and other relevant security certifications.
- Data processing agreement
- Offered to every organisation, so your information governance team can review it before you sign.
- Evidence on request
- Our incident response plan, subprocessor list, hosting certificates and Cyber Essentials certificate.
Need the data processing agreement? Email [email protected] .
How we protect data
- Encrypted
- Data is encrypted in transit and at rest.
- Backups held securely
- Backups are encrypted and kept separate from live data.
- You stay in control
- For SnapMedic ePCR, your organisation is the controller and SnapMedic is the processor.
- Patient records belong in ePCR
- The personal app is not for patient information. Patient records belong in your organisation’s managed system.
More on what we collect and why is in our privacy policy .
Who can access your organisation’s data
- Organisations are kept separate
- Each organisation’s data is separated, with role-based access.
- Records are locked and traceable
- A full audit trail shows who did what, visible to your administrators.
- Support access needs your approval
- Our staff can only see records through a time-limited access grant that you approve.
Report a vulnerability
If you think you have found a security problem in SnapMedic, email [email protected] . Tell us what you found, where, and how to reproduce it.
Please give us reasonable time to fix it before sharing it publicly, and do not access, change or keep anyone else’s data.
If a security incident affects your organisation’s data, we tell you without undue delay.
Found a problem with your own account or a patient-safety issue instead? Use [email protected] .
Last reviewed 12 October 2026.