Facility separation
Each facility is scoped to its own records. Tenant separation is treated as a core product control, not a visual filter.
Security and accountability
Trust is built into access, records and recovery.
Nanto Health is designed around facility separation, clear user roles, traceable sensitive actions and practical recovery controls.
This page describes the safeguards built into Nanto Health without exposing details that could weaken them.
Control posture
Concrete safeguards, stated carefully.
Role-based access
Nurses, doctors, billers and administrators receive access aligned to the work they perform.
Audit evidence
Sensitive access and state-changing actions are recorded to support investigation and accountability.
Protected identifiers
Selected identifiers can be protected with field-level encryption in addition to transport and storage controls.
Backups and recovery
Encrypted backups and tested recovery procedures support continuity when systems fail.
Safe product boundaries
The public website does not access clinical records, authentication state or application credentials.
Clear communication
Useful security information, shared responsibly.
- Safeguards are explained in clear, practical language.
- Internal architecture, locations and credentials remain private.
- The public website remains separate from clinical records and application access.
- Security concerns can be reported directly to the Nanto Health team.
Responsible contact
Report a security concern privately.
Please send the affected URL, steps to reproduce and your contact details to health@nanto.com. Do not include real patient information in the initial message.
A facility-specific demonstration
Discuss your facility’s security and access needs.
We will tailor the demonstration to your chairs, team and current claims process.
Request a demo