Is my clinic data and patient info safe?

Yes — security and privacy are non-negotiable for us, and our handling is aligned with the Australian Privacy Principles (APPs) and the Notifiable Data Breaches scheme.

Dental Shift never handles patient health information; we only process shift, billing and identity data (including AHPRA credentials and limited fitness-to-practice info such as immunisation status where required by a clinic). Everything is stored in Australian-region cloud infrastructure, encrypted in transit and at rest, with role-based access controls and full audit logs.

Limited cross-border disclosure occurs to our payments processor (Stripe, US/EU) for direct debit and payouts. Financial records are retained for 7 years and credential records for 5 years to meet regulatory obligations.

The full policy — including how to access, correct or complain about your data — is at dentalshift.io/privacy.