Security at mlooop
Patient data is among the most sensitive information in existence. We take its protection seriously at every layer — from how data is stored, to who can access it, to how we respond when something goes wrong.
Encryption at rest and in transit
All data stored on mlooop is encrypted using AES-256. All data in transit between your browser and our servers is encrypted using TLS 1.3. No patient data is ever transmitted or stored in plain text.
Role-based access control
Every staff member only sees what their role permits. A front desk officer cannot access clinical notes. A nurse cannot access another role's records. Access is enforced at the application level, not just the UI.
Audit logs
Every action taken within mlooop — viewing a record, editing a prescription, running a report — is logged with a timestamp and the identity of the user who performed it. Logs are immutable and available for review.
Data residency
Your hospital's data stays within the region you operate in. We do not move patient data across borders without explicit agreement. Hospitals retain full ownership of their data at all times.
Access management
Administrators can create, suspend, or revoke staff access instantly. When an employee leaves, their access can be terminated in seconds — no waiting for IT, no dangling credentials.
Infrastructure security
mlooop runs on hardened cloud infrastructure with automated backups, DDoS protection, and 99.9% uptime SLA. We perform regular security reviews and penetration testing on critical systems.
Compliance
mlooop is designed with the Nigeria Data Protection Regulation (NDPR) in mind. We act as a data processor on behalf of hospitals, who remain the data controllers for their patients' information. A Data Processing Agreement (DPA) is available for all customers.
View our Data Processing Agreement →Responsible disclosure
If you've discovered a potential security vulnerability in mlooop, please report it responsibly. We review every report and aim to respond within 48 hours.
security@mlooop.com