Beacon Pulse handles sensitive clinical information, so patient and practice data protection is built into how the platform works, not added on afterward.
Every practice's data is isolated at the database level using row-level security policies. A practice can only ever access its own patients, consults, and documents — never another practice's data.
Clinical documents are generated and signed by the practitioner. Staff accounts you invite can help with patient registration and appointments, and can view practice records, but only the practitioner can delete patient records or consults.
Patient consent is captured at registration. Patients can request a copy of their own data, or request that it be deleted, at any time.
Beacon Pulse is designed around the principles of South Africa's Protection of Personal Information Act (POPIA) — minimal data collection, clear consent, and giving patients real control over their own information. Read our full POPIA position.
For the full legal detail, see our Privacy Policy and Terms of Service.