Security & compliance
Pet clinic software security: data in India, drug register and consent
Pet Clinic Software keeps vet records encrypted on Indian servers, with an append-only drug register, consent records, an audit trail and owner consent logged as the DPDP Act 2023 requires.
Controlled-drug register
Entries for drugs you flag as controlled are append-only, with vet, witness, patient, quantity and running balance; corrections are new lines with a reason. It supports your record-keeping; the Drugs and Cosmetics Rules, the NDPS Act and your state rules decide what you must keep. Printable from the browser; PDF export is planned.
Consent records
Surgery, anaesthesia, boarding and other consents recorded with the owner's name and time and attached to the pet's record. Drawn signatures are planned.
Role-based access
Owner, vet, receptionist and pharmacist roles; pharmacy, register and revenue reports can be restricted per role.
Audit trail
Every edit to a chart, invoice or stock entry is logged with who, when and what changed, and cannot be erased by staff.
Owner consent for WhatsApp
Opt-in source and time stored per owner; one-reply opt-out honoured and logged, as the DPDP Act 2023 expects. Owners imported from a spreadsheet are marked with the source "csv import", so confirm you hold their consent before reminders start.
Export any time
Owners and pets export as CSV from the app; invoices are available through the REST API; a full export of vaccines, stock and registers is provided on request within 30 days of cancellation. Your data stays yours.
How we build and run Pet Clinic Software
- Isolation. Every record carries your workspace ID and every query is scoped to it at the data layer, so one customer can never read another's data.
- Encryption. TLS 1.2+ in transit; encrypted disks at rest; passwords hashed with Argon2id; API keys stored only as hashes.
- Access control. Roles (owner, admin, staff, viewer) with per-module permissions, session hardening and login throttling with temporary lockout after repeated failed attempts. Two-factor authentication is on the roadmap.
- Audit trail. Every create, edit and delete is logged with who, when, from where and what changed.
- Backups. Nightly encrypted backups, kept on a 30-day rolling cycle.
- Data ownership. Your data is exported for you on request (and much of it is available through the REST API). If you leave, you get a 30-day export window and then your data is deleted.
- Read more. See our privacy policy, terms of service, the full Pet Clinic Software feature list and pricing.
- Responsible disclosure. Found a vulnerability? Email info@radiatus.com and we will respond within 2 business days.
Security questions
Where is Pet Clinic Software data stored?
On servers in India (AWS Mumbai region), encrypted at rest, with TLS 1.2+ in transit and nightly encrypted backups kept for 30 days. Pet Clinic Software never sells owner data, and each clinic's records are isolated by workspace at the database layer so no clinic can read another's data.
Who can see the controlled-drug register?
Staff roles with view access; only roles with edit access can add entries. Each entry records the drug, type (opening, receipt, issue, waste or correction), patient, vet, witness, quantity, supplier reference and running balance, and cannot be edited or deleted, only corrected with a new line and reason. It supports your record-keeping; check it against the Drugs and Cosmetics Rules, the NDPS Act and your state rules, which decide what you must keep.
How does Pet Clinic Software help with the DPDP Act 2023?
It gives your clinic the tools: owner consent for WhatsApp is recorded with source and time, a STOP reply is honoured and logged, records hold only what the clinic needs, and owner access or erasure requests can be met from an export. Your clinic is the data fiduciary and stays responsible for how it uses owner data.
Are owner phone numbers used for anything else?
No. In Pet Clinic Software, owner numbers are used only for the reminders and updates your clinic sends. Owners can stop messages with one reply, the opt-out is logged as the DPDP Act 2023 expects, and AvanceZone never uses the numbers for its own marketing.
Every pet on record. Every vaccine on time.
Import your owner list in an afternoon. 14-day free trial, no card, free migration from paper, Excel or any other software.