Security & Privacy
How TekMeDoc protects your accounts, sessions, and health data — from the first login to every consultation and prescription.
NDPR Compliant
Nigeria Data Protection Regulation
MDCN Aligned
Medical & Dental Council of Nigeria
TLS Encrypted
All data in transit protected
Verified Doctors
Credentialed & licensed physicians
How We Protect Your Data
Multiple layers of security ensure your health information stays private and secure at every step.
Encrypted Transport
All API and web traffic uses TLS. Authentication tokens are stored in httpOnly, Secure, SameSite cookies — never in JavaScript-accessible storage.
Access Controls
Short-lived JWT access tokens, server-stored refresh tokens, email/phone verification, and role-based routes protect all patient and clinical data.
Private File Storage
Medical documents and uploads are stored privately in object storage. Access requires authorization and is granted via time-limited signed URLs only.
Admin Two-Factor Authentication
Administrator accounts can enable TOTP authenticator apps for an additional login verification step beyond username and password.
CSRF Protection
All state-changing requests from the web app use double-submit CSRF tokens alongside cookie-based sessions, preventing cross-site request forgery.
Audit Logging
Security-sensitive actions — including login, logout, and password changes — are recorded and available for administrative review at any time.
Additional Safeguards
Behind the scenes, every request is validated, monitored, and protected.
TekMeDoc is built for NDPR alignment as a Nigeria-first platform. Contact us for enterprise security documentation.
Your health data is safe with us
Start your healthcare journey knowing your information is protected by enterprise-grade security.