Security and POPIA
Built like the report could end up in court.
Because sometimes it does. PsychBuddy treats every patient record as evidence-grade: isolated, encrypted, audit-logged, and kept in South Africa.
The posture, in plain language.
Data residency, honestlyEU-hosted (London), GDPR-grade protection — the lawful POPIA route while no SA cloud region exists
Encryptionin transit and at rest
Tenant isolationrow-level security per clinician
Audit logevery score, export and access recorded
Retention6+ years per HPCSA Booklet 9
Your contenttemplates and norms stay yours
Who is responsible for what.
You — the Responsible Party
- You own the clinical relationship
- You decide what is recorded
- You control every export
PsychBuddy — the Operator
- We process only on your instruction
- We isolate and encrypt
- We log everything
Your patients can ask what we hold. We can answer, precisely.
Create your practice account