Security
This page restates the controls in the Privacy Policy (last updated 17 August 2026). If the two ever differ, the Privacy Policy is the one that governs. It covers Aegis EMR, MediVoice, Telehealth, QueueCare, AI Prescriptions, Clinical Risk Calculators, and the Drug Interaction Checker.
Hosting
Infrastructure hosting is Hostinger International, in the EU. Clinical records for clinic and hospital use are stored there, in an isolated database per practice, at the practice’s instruction. Solo or standalone use may retain no clinical data.
naghamyhealth.com is served over HTTPS and sends HSTS, so browsers keep using the encrypted connection.
Payments are handled by Stripe, Paymob, or PayPal, depending on the product. Naghamy Health does not store card numbers. Account passwords are stored encrypted.
Sub-processors
Infrastructure hosting, in Germany and France.
AI text structuring for MediVoice transcripts. Clinical data and transcripts are sent under Anthropic’s standard terms, with your consent.
Audio transcription and AI processing, including fallback text structuring for MediVoice. National identification images submitted to AI Prescriptions are processed by Groq for extraction. That transfer is done with your consent.
Payment processing. Which one applies depends on the product. Card numbers stay with the processor.
Access and backups
Per-tenant database isolation is enforced. Access is session-authenticated, and every query is scoped to that practice.
MediVoice audio is transcribed from a temporary upload and discarded when the request finishes. It is never stored on our servers.
Backups are encrypted and have a documented restore process. The schedule is 24 hourly, 30 daily, and 12 weekly copies. After an account is deleted from live systems, those copies are permanently removed within twelve weeks.
Retention
Clinical record retention is enforced per tenant and is configurable. The default is 90 days. A practice can set a longer period when its jurisdiction requires it. Account data is kept while the account is active. Deletion removes data from live systems immediately.
Email privacy@naghamyhealth.com. Those rights include the rights under Egypt’s Personal Data Protection Law, Law 151 of 2020.
Email privacy@naghamyhealth.com. For product support, use support@naghamyhealth.com or the contact page.
No. Audio is processed in real time from a temporary upload and discarded immediately after transcription.
The same facts as the policy.