Security and data

A safe rollout starts with a defined scope

A demonstration can use synthetic data. A pilot involving real data requires separate confirmation of the selected workflow, permissions, responsibilities, backup rules and the pilot exit plan. The presence of a feature does not by itself authorise every type of data processing.

What the system already provides

• operational data access is limited by facility, role and permission,
• critical care records retain the author, time and workflow history,
• corrections and invalidations leave an audit trail instead of silently replacing earlier records,
• a package configuration cannot omit dependencies required by the selected facility profile.

These mechanisms support access control and evidence. They are not a security certification or a legal-compliance guarantee for a particular deployment.

What must be confirmed before production use

• where the instance is hosted and how infrastructure responsibilities are divided,
• backup frequency, retention and the method used to test restoration,
• support contacts, communication channels and incident escalation,
• migration scope, export format and the cooperation exit procedure,
• user roles, administrator access and access-removal rules,
• the required data-processing arrangements.

Responsibilities are shared

The supplier is responsible for the agreed application configuration, product updates and the support defined in the offer. The facility remains responsible for account assignment, user devices, the local network, team organisation and reporting staff changes or incidents. The exact division belongs in the rollout document, not in a generic promise of “complete security”.

Export and exit terms must be agreed before launch

Before real data is entered, both parties should know which data can be exported, in which format and timeframe, who confirms completeness, and what happens to copies and archives after the contract ends. Until that process has been tested for the agreed scope, MójDPS does not promise effortless migration or automatic transfer of the entire history.