Chairsyde AI · Security

We take data security seriously

Every day, patients and dentists trust Chairsyde with highly sensitive data. That responsibility is immense, and we treat it that way.

Book a practice performance audit See our certifications

Our approach

Chairsyde is built to make consultations clearer for patients and the workflow simpler for clinicians. Getting that right means being clear about what data we process, why we process it, and how it is used.

We follow the principle of least privilege, so access to data is restricted to only those who absolutely need it.

We meet best-in-class security and privacy standards

Chairsyde patient letter shown on a phone

Certified to recognised standards

Overview

How your data stays protected

Gold standard protection

All data, at rest and in transit, has 2048-bit encryption. Passwords are never stored or visible to Chairsyde, and authenticated JSON web tokens are used to access server-side resources.

Storing data safely

We store your data based in your practice's geographic location using Amazon Web Services cloud servers, meeting ISO 27001, ISO 27017, ISO 27018 and ISO 9001 regulations.

GDPR compliance

We have made sure Chairsyde is GDPR compliant, making it a worry-free solution for practices in the UK and across Europe.

A culture of data security

All Chairsyde staff complete security and information governance training when starting, and we keep monitoring our team's understanding of data security to ensure best practice.

Security in a snapshot

The detail behind the reassurance

A closer look at how security runs across the platform, the network, our devices, and our recovery planning.

Application & network security

Data storage and compliance. Our storage adheres to strict data protection regulations, including GDPR, so sensitive information is handled to the highest standard.
Access controls. Rigorous controls follow the principle of least privilege, so users only reach the data their role needs.
Network security. Advanced segmentation, continuous monitoring, and firewalls protect against unauthorised access and threats.

Endpoint security

Comprehensive protection. All internal Chairsyde devices run advanced anti-malware and anti-virus software.
Device management policies. Robust policies govern device management and endpoint protection across every device.
Regular updates. Ongoing update and patch management keeps systems secure and current against emerging threats.

Monitoring, backup & recovery

Real-time monitoring. Monitoring and alerting let us identify and address security incidents quickly.
Disaster recovery. Our disaster recovery plan is tested twice a year to confirm it is effective and ready.
Recovery objectives. Clear recovery time and recovery point objectives keep downtime and data loss to a minimum.

Ready when you are

Security that stays out of the way of care

Your patient data stays protected, so your team can focus on the conversation in the room. See how Chairsyde fits into your practice.

Book a practice performance audit