iScript is the operator of your practice's patient data under POPIA; your practice remains the responsible party.
- Each practice runs in its own isolated tenant. No practice can see another's data.
- Data is stored and processed in line with POPIA and HPCSA guidelines on patient records.
- Access is role-based and every clinical record action is logged.
- Practitioners are verified against their HPCSA registration before clinical access is granted.
Our full privacy notice is at iscript.live/privacy.
Making a POPIA request
Email support@iscript.live with the subject POPIA request. We will verify your identity (HPCSA number or written authorisation from the responsible practitioner) and respond within the statutory timeframe.
Reporting a security concern
If you believe you have found a vulnerability or a data exposure, email support@iscript.live with the subject Security and do not share details publicly. Security tickets are raised to high priority automatically.