Security
Indrix holds patient records, so the question isn't whether we take security seriously — it's what we actually do. This page says what, in plain terms.
There are no passwords
Staff sign in with a security key — the small device that plugs into the computer — or with the fingerprint reader the computer already has. Passwords don't exist in Indrix. There is nothing to guess, nothing to reuse from another site, nothing to write on a sticky note, and nothing to hand over in a phishing email.
This is the single biggest difference between Indrix and the software most practices run today, and it removes the way the large majority of break-ins actually happen.
Every chart that gets opened is recorded
Who opened a patient's record, when, and what they were doing at the time. The record is append-only — it can be read but not edited or deleted, including by us.
You can read the history for any patient yourself, from inside the application, without asking us to pull a log. If a patient ever asks who has seen their file, you can answer them the same day.
Sessions close themselves
A signed-in session ends after fifteen minutes of inactivity. Front desks get walked away from, and operatory computers are in rooms patients sit in alone. The timeout means an unattended screen stops being a way into the chart.
Practices are separated in the database
Every record carries the practice it belongs to, and the database itself enforces that boundary — not just the screen that displays it. The separation is applied at the storage layer, so a query has to satisfy it before any data comes back.
This matters because "the app filters by practice" is a promise about code being correct everywhere. Enforcing it underneath means a mistake in one screen cannot turn into one practice seeing another's patients.
Records are kept, not erased
Deleting something in Indrix marks it deleted and keeps the underlying record, because HIPAA requires patient data to be retained for six years. Staff see a clean, current chart; the history stays intact underneath it for when it's needed.
We sign a Business Associate Agreement
A BAA is the contract HIPAA requires between a practice and any vendor that handles patient information. We sign one with every practice before any real patient data is entered — not as an upsell, and not only when a customer asks.
This website is deliberately inert
The page you're reading runs no JavaScript, sets no cookies, and loads nothing from anyone else — no analytics, no tracking pixels, no fonts fetched from a third party. It is plain files.
That is a security decision rather than a minimalist one. Indrix sign-in keys are registered to this domain, so anything running here is inside the boundary that protects them. Having nothing to execute is the strongest position available, and the site is served with a policy that forbids scripts outright.
It's also why you'll never find a sign-in box on this site. Staff go straight to the application.
Telling us about a problem
If you believe you've found a vulnerability, email security@indrix.app and we'll come back to you. We won't pursue anyone who reports a genuine issue in good faith and gives us a reasonable chance to fix it before making it public.
Machine-readable details are at /.well-known/security.txt.