Security and access
Roles, how Caresoft protects clinical and calendar data, and where compliance depends on you.
For everyoneUpdated September 19, 20261 min read
- The three roles
- How data is protected
- Compliance
Roles
Caresoft has three roles. Each one sees only the parts of the system it needs:
| Role | Sees |
|---|---|
| Psychologist / staff | Their practice's patients, calendar, notes and billing |
| Patient | Only their own record, through the portal |
| Platform administrator | Accounts and plans, not clinical content |
How data is protected
- Passwords are stored as hashes, never in plain text
- Google Calendar tokens are encrypted at rest
- Sensitive billing identifiers are encrypted and never returned in plain text
- Issued financial documents and signed consent versions are kept unchanged
Compliance
Regulatory compliance depends on how your practice deploys and uses Caresoft. The Trust center explains current controls and where your own legal and policy work applies.
Related guides