Security starts with understanding how data flows
Hospital solutions may handle personal information and sensitive health data. Assessing each project means considering which data is used, who can access it, where it travels and how long it is kept.
Learn about the documented features of the portfolio and the points your institution should clarify before contracting.
Documented features, with a defined scope
EasyBot Médico
Individual access by phone number.
EasyBot Paciente
Identification by CPF (Brazilian taxpayer ID) and date of birth.
EasyAtend
Identification by CPF and date of birth with a queue ticket; product in evolution.
EasyPABX
Employee/role validation in Tasy and an auditable log.
EasyMove
Auditable timeline of internal transport.
Medusa
Access profiles, card/biometric/facial credentials and auditable events.
On their own, these features are not equivalent to multi-factor authentication, certification, identity assurance or full LGPD compliance. Biometric data requires a specific assessment of its processing. The scope of controls must be examined per solution and environment.
LGPD: purpose, responsibilities and rights
The assessment of data processing should identify purposes, necessary data, applicable legal bases and each organization's responsibilities. Controller and processor roles depend on the activities carried out and on the contracts; they should not be assumed for every scenario.
Assess the requirements with your team
IT, security, legal and user areas may have different questions about the same flow. Bring your institution's requirements to the conversation.