Security and privacy are not features. They are foundations.

PDPC Data Controller

Zanexa Solutions is registered as a Data Controller under the Personal Data Protection Commission of Tanzania.

Data Localization

Customer data is stored and processed within compliant infrastructure aligned with Tanzanian data protection requirements.

Role-Based Access Control

Every user operates within defined permission boundaries. Clinical, administrative and management roles are separated.

Multi-Factor Authentication

MFA is available and encouraged for all privileged accounts across Zanexa platforms.

Tenant Isolation

Each facility operates in an isolated data environment. No cross-tenant data access is permitted.

Data Ownership

All facility data belongs to the facility. Zanexa does not share, sell or use customer data for any purpose beyond platform operation.

Encryption

Data is encrypted in transit and at rest using industry-standard protocols.

Backup & Recovery

Automated backups with defined recovery objectives. Tested restoration procedures.

Audit Logging

All significant user actions generate immutable audit records — who did what, when, and from where.

Incident Management

Defined incident response procedures with customer notification commitments.

Secure Development

Security is incorporated into the development process. Code review, dependency auditing and vulnerability management.

Integration Security

All third-party integrations use authenticated, encrypted channels. Credentials are never embedded in code.

Responsible AI

Any intelligence or automation features are labelled clearly, do not replace clinical judgment and operate with full auditability.