This page explains, in plain words, how we protect the data businesses keep in DM Consulting Services's software: Dua eAvokat, Dua eKlinike, Dua Car Rental System, Dua Real Estate System and Dua Tour Booking System. We only write what we do today.
Your data is yours
- You keep ownership of everything you put in the software. We never sell it, use it for advertising or use it to train artificial intelligence.
- When you leave, on request we give you a copy of your data in a common format (Excel and the uploaded files), with no exit fee.
- When you come from another program or from Excel, you can upload the data yourself; on the Pro plan we do the import for you for free.
How we protect it
- Encrypted connections everywhere (HTTPS). Browsers are required to always use the encrypted connection.
- Every business kept apart. One business's data is never visible to another.
- Two-step sign-in. Staff with full rights confirm sign-in with an email code or an authenticator app.
- Roles. You decide who sees and who changes what.
- Encrypted passwords and keys. Passwords are never stored as text; keys for connected services are stored encrypted.
- Protection from bots. Public forms and sign-in are protected by Cloudflare.
- Activity log. Staff's main actions are recorded.
- We only come in to help you. Our staff open your panel only through a "support session" that is recorded with the person's name.
Health data (Dua eKlinike)
- The medical file is encrypted. Allergies, conditions, medicines, visit notes, prescriptions and the reason for a visit are stored encrypted, unreadable in the database and in backups.
- Only those who treat the patient. Reception and finance never see the medical file; doctors and assistants do.
- Every opening is logged. The clinic's director sees who opened each patient's file, when and from where.
- Doctors sign in with a second step, like the director and finance.
- Never in alerts. Emails to staff, Telegram alerts and our own logs never carry patient names or health details.
Backups
- Nightly, encrypted backups kept away from the main server.
- We test that the backups really restore.
When an outside service has a problem
SMS, online payments, GPS and other outside services each have their own on/off switch. If one fails, we switch it off (or it switches itself off) and the rest of the software keeps working.
Where the data is kept
- RENTAL, REALTY and Dua Tour Booking System: on DM Consulting Services' server in Albania, with an encrypted backup copy in Cloudflare R2.
- Dua eAvokat: on servers in the European Union (Hetzner) and in Albania.
The full list of services that touch the data (sub-processors) is in the data processing agreements: Dua eAvokat, Dua eKlinike and Rental, Realty, Tours.
If a breach happens
We tell you without delay and no later than 48 hours, with what is known and what we are doing.
Report a security problem
If you find a weakness in our software or websites, write to [email protected]. We answer quickly and take no legal action against anyone who reports in good faith.