Privacy you can explain clearly
Know exactly who can store and read data. No fine print.
The honest boundary
Only self-hosting keeps client data entirely outside our infrastructure. On the free dashboard, Vault prevents us from decrypting protected identity fields.
TLS protects connections, with additional encryption for sensitive stored fields.
Vault encrypts identity fields in the browser. Only the practice holds the private key.
Access logs record who opened or deleted personal data.
We do not claim encryption hides everything: operations, delivery, and abuse prevention require metadata. Choose self-hosting if that boundary is not acceptable.
Self-hosting
The app and database run on your infrastructure. TherapyList cannot view or retrieve stored client data.
- You control the server, keys, backups, and retention.
- Installation uses published immutable container images.
- A health check verifies the installation after setup.
Free dashboard with Vault
Vault encrypts identity details in the browser. TherapyList hosts the encrypted text but does not hold the private key.
- therapylist stores encrypted identity data without holding your private key.
- Search and reporting work on fields not encrypted in Vault.
- If your private key is lost, encrypted identity data cannot be recovered.
- Best for clinics needing stronger encryption.