Security and privacy
Your account holds patient information. It is protected accordingly
Two-step verification at login, control over the devices you are logged in on, automatic logout, and encryption of every clinical record before it is stored.
21 days free on Growth and Pro · cancel any time
A password should not be all that stands between a stranger and your patients' records
Passwords leak, practice computers are shared, and phones get lost. So the protection comes in layers: who can log in to the account, from which devices, and what happens to clinical information even after someone is in.
What protects the account
Six layers of protection, on every plan
Two-step verification
After your password, a code from an authenticator app on your phone. Ten single-use recovery codes keep you in if the phone is lost.
Passwords that hold up
At least 12 characters, checked against known data breaches, and five wrong attempts in 15 minutes lock login for 15 minutes.
Logged-in devices
Every device logged in to your account, with its browser and when it was last active. Log out any one of them, or all the others at once.
Security activity
Your recent logins and security changes in one list. A login from a new browser, turning two-step verification on or off, and a password change are also emailed to you.
Automatic logout
After a period without activity that you choose, 15 minutes to two hours, the account logs out. Useful on a shared computer at the practice.
Encryption of clinical records
Each clinical record is encrypted on its own with AES-256-GCM, and uploaded files are stored encrypted in private storage.
How it works
Four steps in your security settings
Turn on two-step verification
Scan a QR code with an authenticator app and enter the code it shows. From then on, logging in takes your password and a code from your phone.
Keep your recovery codes
When two-step verification is turned on you get recovery codes, shown once, for when your phone is not with you.
- Ten codes, each works once
- Generate a new set whenever you like
Choose when to log out automatically
Pick 15, 30, 60 or 120 minutes without activity, and check your recent logins and security changes on the same screen.
Check the devices you are logged in on
See every device with its browser and when it was last active, and log out any you do not recognize.
Clinical information
Notes, questionnaires and documents get an extra layer
Beyond protecting the login, the clinical content itself is encrypted, access to it is logged, and signed records stay exactly as they were signed.
Encrypted record by record
Visit notes and addenda, questionnaire answers, letters, signatures, intake answers, patient notes and details, goals, documents and superbills are each encrypted with AES-256-GCM. Uploaded files are encrypted before they are stored, in private storage.
Access is logged
Opening, changing, signing and exporting clinical records is logged: who, when, which record, the action and whether it succeeded. The log holds record IDs, never the content.
Support never sees clinical content
An administrator can open your account for up to an hour to help with setup or billing. Clinical records stay hidden from them, any attempt to open one is recorded under their own name, and they cannot change your security settings.
Signed records stay as signed
Signed visit notes and addenda, letters, signed PDFs, superbills and completed questionnaires cannot be changed or deleted. The database itself refuses it.
An illustration of what is recorded each time a clinical record is opened or changed.
This page lists only the measures in place today, and claims no certification that has not been checked. How patient information is handled is set out in full in the privacy policy and terms of use.
Example
A closer look at the security settings
Step 1 of 5
A second step beyond the password
The authenticator app and your recovery codes on one screen, with the state of each.
All names and details in these illustrations are made up.
How security connects to the rest of Zento
The signed, encrypted notes, goals and documents these protections exist for.
Patient file →
A signed letter stays as it was signed, and its signature evidence is stored encrypted.
Letters and e-signature →
Patients' questionnaire answers are stored encrypted.
Outcome measures →
The installed app opens the same account, with the same protection at login.
The practitioner app →
Security and privacy by plan
Protecting the account and clinical information is not a paid extra. It is on every plan.
Frequently asked questions
Do I need a particular plan for these protections?
No. Everything on this page is on every plan: Starter, Growth and Pro.
What is two-step verification?
A second step when you log in: after your password, a six-digit code from an authenticator app on your phone. A leaked password on its own is then not enough to get into your account. When you turn it on you get ten single-use recovery codes, for when you do not have your phone.
What if I lose my phone?
Log in with one of your recovery codes. Each works once. You can then set up two-step verification on your new phone and generate a fresh set of codes.
What should I do if I see a device I do not recognize?
Log it out from the list of logged-in devices, then change your password, which logs out every other device as well.
What happens if someone steals my login?
Each sign-in token is replaced every time it is used. If a replaced token turns up again, apart from a few seconds' grace for two open tabs, the whole session it belongs to is ended, so a copied token stops working. Five wrong passwords in 15 minutes also lock login for 15 minutes.
Will I be told about security changes?
Yes. You are emailed when your account is logged in to from a browser it has not used recently, when two-step verification is turned on or off, when recovery codes are regenerated, when your password changes, when login is locked after failed attempts, and when a session is ended because its sign-in details were used twice. Logins and changes also appear in your security activity.
How is clinical information protected?
Visit notes and addenda, questionnaire answers, letters, signatures and signed PDFs, intake answers, patient notes and details, goals, documents and superbills are each encrypted with AES-256-GCM before they are stored, under a key kept apart from the rest of the system. Uploaded files are encrypted before they reach a private storage bucket. Opening, changing, signing and exporting clinical records is logged by record ID, never the content.
Can your staff see my patients' records?
No. Our administrators can open an account to help with setup or billing, but visit notes, goals, documents, questionnaires, letters and intake answers are refused to them. Anything they do there is recorded under their own name, and they cannot change the account's security settings.
What are the password rules?
At least 12 characters, not built on the name part of your email address, and not one that has appeared in a known data breach. There are no rules about symbols or capitals: length does more.
More features that work together
Each feature is useful on its own. The real value comes when they connect: a profile that brings patients in, inquiries that become appointments, and appointments that bring reviews.
Professional profile
One page that shows your practice, your training and how you work.
Learn more
Digital presence
More ways for patients to find your practice.
Learn more
Reviews and trust
Verified reviews from people who confirmed their email.
Learn more
Inquiries in one place
Every message that comes in, tracked, so none of them is missed.
Learn more
Online booking
Clients pick a time that is genuinely free and book it themselves.
Learn more
Automatic reminders
Reminders go out before every appointment without you sending them.
Learn more
Client records
Everyone you see, their history and their notes, in one place.
Learn more
Patient file
Signed visit notes, treatment goals, documents, patient details and a timeline in one encrypted file, with an access log and a PDF export of the file.
Learn more
Outcome measures
Send PHQ-9, PHQ-8, GAD-7 or PEG by link. The patient answers on their phone, the score is calculated as published, and the trend sits in their file.
Learn more
Letters and e-signature
Attendance notes, treatment summaries, medical necessity letters, referrals and consent forms, locked as PDFs on your letterhead and signed by the patient remotely.
Learn more
Superbills and reports
Superbills from signed notes, a monthly financial summary, a treatment log, and card payments into your own Stripe account.
Learn more
The practitioner app
Install your dashboard on your phone, tablet or computer from the dashboard itself, with no app store, and subscribe to your appointments from the calendar you already use.
Learn more
Open your account
Growth and Pro begin with 21 days free. We store a card to start the trial and charge nothing today.
- Verify your email address with a one-time code
- A 21-day trial on Growth and Pro
- Cancel any time from your dashboard
Work with patient information, in an account that is properly protected
Start a 21-day trial and turn on two-step verification at your first login.
21 days free on Growth and Pro · cancel any time