Trust, security & privacy
How Plano protects clinic, doctor and patient data: access controls, data handling, subprocessors and how to contact us about security or privacy.
Access & authentication
Every clinic, doctor, staff and super-admin account signs in with email and password or Google. Roles are assigned per clinic and checked on the server for every read and write.
Data handling
Data is transmitted over HTTPS and stored in a managed Postgres database with daily backups handled by the platform.
Email & messaging
Every email includes a one-click unsubscribe link; unsubscribed or bounced addresses are suppressed.
Retention, deletion & privacy requests
Each clinic is the data controller for its patient records and can edit or delete them at any time from the admin panel.