Security

Your Clients' Secrets
Stay Secret With Us Too

PRAXINGO encrypts data so that even we cannot read it. Not because we don't want to — but because it's technically impossible.

Why You Can Trust PRAXINGO

Stored Encrypted

Client names, phone numbers, notes and all sensitive data are encrypted in the database. Even if someone breached the server, they'd only find unintelligible character strings.

Only You Can Unlock It

The encryption key is derived from your password. It's not stored on the server, not sent anywhere. Without your password, nobody can access your data — not even us.

GDPR Compliant

Built-in data processing agreement templates with digital signatures. Consent management, right to erasure, data portability — everything GDPR requires, in one click.

Only Those You Authorise

Multi-level access system: owner, admin, therapist, assistant. Everyone only sees what they're authorised for. The assistant, for example, cannot see clinical notes.

Auto-Lock

If you don't use the system for 15 minutes, it automatically locks. You need to re-enter your password — so no one else can access it if you leave your computer.

GDPR compliant
AES-256-GCM
Encrypted data storage

What Our Database Looks Like Inside

On the left: what you see on screen — on the right: what's actually stored on the server.

What you see
name:
Anna Smith
email:
anna.smith@email.com
phone:
+44 20 1234 5678
note:
The client shows signs of anxiety, in the next session we'll try relaxation techniques...
What's in the database
name:
U2FsdGVkX1+8xQmLp3...
email:
U2FsdGVkX1+7kPzRw9...
phone:
U2FsdGVkX1+Qm4xNf2...
note:
U2FsdGVkX1+9mNwKvT8j3pL2xR...

We encrypt all sensitive data before it reaches the server. It never exists in readable form in our database — not even our sysadmin can see it.

Even AI Cannot Decrypt It

What would happen if someone pasted encrypted data into ChatGPT?

What is this data? Decrypt it:
U2FsdGVkX1+8xQmLp3kR7nB2xM4...

This is an encrypted text (AES-256 encryption).

I cannot decrypt it. The key needed for decryption is not in the database — it only exists in your browser and is unlocked only with your password.

Neither I, nor any other AI, nor the PRAXINGO team can access the original data.

The encryption is mathematically impossible to break without your password. Even with the world's most powerful supercomputers, it would take billions of years to crack a single client record. The same method is used by banks and the military.

How Does It Work? (Simply)

Imagine locking your clients' data in a safe — and you hold the key.

1

The Safe

All your client data goes into a safe. The lock is created from your password — unique, only yours.

2

The Key

The key never leaves your device. We don't send it to the server, we don't store it anywhere. If you close your browser, the key disappears — you need to re-enter your password.

3

The Backup

At registration you receive a recovery key. If you forget your password, you can use it to set a new one. Keep it in a safe place!

Exactly What Data Is Encrypted?

Everything relating to your clients is stored encrypted.

  • Client names Encrypted
  • Email addresses Encrypted
  • Phone numbers Encrypted
  • Addresses Encrypted
  • Dates of birth Encrypted
  • Therapy notes (SOAP, DAP) Encrypted
  • Drawing board contents Encrypted
  • Contracts and documents Encrypted

GDPR & Data Processing Agreements

You don't need a lawyer for GDPR compliance. PRAXINGO includes 10 ready-made data processing agreement and consent templates that you can send to your clients with one click — with digital signatures.

  • Data Processing Notice

    Ready-made template for psychologists and therapists — just enter your details

  • Therapy Agreement

    A proper therapeutic agreement that the client signs digitally

  • Parental Consent Form

    Consent template required for therapy with minors

  • GDPR Consent

    Declaration required for processing special personal data

Your Clients' Rights (That We Support)

Right of Access

Your clients can request their stored data at any time. Export and send it to them with a single click.

Right to Erasure ("Right to Be Forgotten")

If a client requests it, you can permanently delete all their data. Nothing remains, not even from the encrypted data.

Data Portability

Your clients' data can be exported (JSON, CSV) — if you switch to another system, the data remains yours.

Right to Rectification

You can correct inaccurate data at any time on the interface — it updates instantly in every related field.

Who Sees What in the System?

When working with multiple therapists, everyone only sees their own clients.

Owner

Sees all features, including billing and user management.

Admin

Has access to all clients and can modify settings (except billing).

Therapist

Only sees their own clients and calendar. Cannot access other therapists' data.

Assistant

Sees the calendar and manages bookings, but cannot see clinical notes or client data.

Security Questions

The most frequently asked questions, answered clearly.

Try It — Your Client Data Will Be Safe

14-day free trial, no credit card required. Encryption is active from the first minute.

security@praxingo.com