- Records are stored on the iPad with the iPad's data protection, and every view and change is written to a tamper-evident audit log.
- Face ID, Touch ID or the iPad passcode is asked when the app opens; each person then signs in with their own PIN.
- Cloud sync is end-to-end encrypted. A new iPad gets the keys only after an owner or admin compares a code on both screens and approves it, or with the Clinic Recovery Key.
- A new iPad also needs a one-time code sent to the account's email.
- Signed consents are sealed so any change can be detected.
- Backups are encrypted with the Clinic Recovery Key or a password you choose.
Report a vulnerability
Email security@honestface.app with the details. Please give us reasonable time to fix the issue before telling others, and don't access data that isn't yours. We'll acknowledge reports within 3 working days.