Built with battle-tested technologies. Designed to protect patient data.
Glavier OIS (Ophthalmic Information System) is built on proven, widely used open-source technologies, with protection at every layer.
Your clinic's records stay yoursEach clinic's data is kept separate, and every request is checked on our servers before anything is shown or changed.
The right access for the right personRoles decide what each staff member can see and do, down to individual eye-examination types. Temporary access for locums ends automatically on the date you set.
Every permission change is recordedYou can see who changed whose access, and when.
Clinical files are never publicScans, attachments and signed consent forms open only through private links that expire within minutes.
Secure sign-inSessions expire automatically, repeated sign-in attempts are limited, and new staff must set their own password.
A full history of the visitPatient queue moves, procedures, claims and changes to patient and visit records are logged with who did what.
IN DETAIL
How practice data is protected.
Organization and branch separation
Every request is checked on the server against the user's organization. Records from another clinic can't be read or linked.
Staff work only in the branches they are assigned to.
Access control
Owners create roles with a permission matrix, down to individual exam types, diagnosis, referrals, notes, the audit log and settling HMO claims.
Extra permissions can be granted to one person with an expiry date and a reason, and are revoked automatically at expiry.
Permission changes take effect on open screens, without signing out.
Sessions and sign-in
Sign-in tokens are kept in secure, HTTP-only cookies and expire after 24 hours of inactivity.
Repeated sign-in attempts are rate-limited.
Staff whose password was set by an admin must change it at first sign-in, and resetting a password signs that person out everywhere.
Clinical files and records
Scans, attachments and signed consents open through private links that expire after five minutes, issued only after an access check.
Change history is kept on patients, visits, sales, inventory, services, the patient queue, procedures and HMO claims.
Owners can see and revoke devices that hold encrypted offline files.
Online booking protection
A bot check on every booking and cancellation, with rate limits and per-phone and per-day caps.
The booking form never reveals whether someone is already a patient.
Have a specific security or data-protection question? The Glavier team answers each one individually.
