Access control
Role-based permissions separate super administration, pharmacy administration, staff and customer access. Access is scoped to the pharmacy workspace and sensitive actions require authenticated sessions.
Data protection
Data is transmitted over encrypted HTTPS connections and stored with managed database security controls. Credentials are handled by our authentication provider and are never stored in application tables as plain text.
Operational safeguards
PharmKora records important operational events, supports staff permissions, and provides review queues for prescriptions, safety events, compliance tasks and inventory controls.
Responsible disclosure
If you believe you have found a security issue, please contact security@pharmkora.com with the affected page, steps to reproduce, and any relevant evidence. Please do not include real patient information.
Shared responsibility
Pharmacies are responsible for choosing authorised users, protecting their devices, maintaining accurate records, and complying with applicable pharmacy, privacy and health regulations.