Data & Security

1. Company and user access

Doctors Detailing has company and team account roles for authorised administrators, managers and medical representatives. Permissions and enabled modules vary according to account role and company configuration. Each organisation should periodically review which staff members can access its files and commercial workflows.

Users should maintain individual credentials, avoid sharing accounts and notify the responsible administrator after a staff change or suspected misuse. Administrators should revoke access promptly when required.

2. Prepared offline presentations

Where enabled, approved visual-aid pages can be downloaded into protected local storage on a supported device for offline viewing. The current workflow includes an offline vault/PIN step and encrypted local content handling. New content downloads, authentication scenarios and synchronisation may still require a connection.

A browser-based field application cannot be described as guaranteed to cold-start entirely offline on every device. Test the intended offline steps on the real tablet or phone before visiting a clinic.

3. Commercial and team records

The platform can handle POB orders, price lists, call plans, targets and internal messages in enabled modules. Only authorised staff should receive access to commercial rates or company files, and companies should define who is allowed to approve or alter that information.

An offline draft or queued order is not necessarily a server-confirmed or stockist-accepted transaction. Users should confirm its sync status and follow their company's process for sensitive corrections.

4. Hosting and data transmission

Hosted access normally depends on encrypted web connections and service-provider safeguards. Technical controls can change as the application evolves. We do not claim a specific ISO certification, SOC audit, data-residency location, independent security assessment or zero-risk architecture unless formally verified and documented.

Never upload passwords, payment-card PINs, patient medical details or credentials through public enquiry fields. Use approved company channels to manage sensitive records.

5. Device responsibilities

Use a screen lock, keep devices updated, restrict access by unauthorised persons and remove old downloaded content where your company policy requires. Shared tablets and borrowed phones can create exposure even when server permissions are set correctly.

If a device is lost, contact the company administrator or support promptly to review available logout, revocation or credential-reset options. Delete local downloads and exported files where practical.

6. Backups, retention and deletion

Business records and backup availability depend on implemented service components and company policies. Users should not assume automatic lifetime backups or instantaneous disaster recovery unless the subscription expressly provides them.

Account deletion is subject to identity verification, company ownership and relevant retention obligations. The Account Deletion page explains how to begin a request and why locally exported records may need separate treatment.

7. Report a suspected vulnerability

If you observe a suspicious login, data exposure or security weakness, email mypharmadigi@gmail.com with a short description, approximate time, affected page and safe reproduction steps. Do not send live credentials or patient information, and do not attempt unauthorised access to another company's data.

Please allow reasonable time for triage before publishing technical details that could expose customers. We appreciate good-faith reports and may ask follow-up questions to reproduce the issue.

8. Scope and further information

These statements describe practical controls and known capabilities. Security arrangements may be updated as the product develops. For privacy information, refer to the Privacy Policy; for contractual commitments or special data handling, request written terms from Pharmadigi.