This is a plain-language summary of how CustoMED handles your imaging and case data, for anyone who uploads scans or answers security questions about CustoMED. For formal regulatory and compliance details, see Regulatory Status and Use of the CustoMED Platform. For the formal declaration, see CustoMED Patient Data Handling Declaration.
Anonymization
DICOM scans are anonymized in your browser before they are uploaded, so patient-identifying fields don't leave your computer. To help you recognize the case, the patient's initials and the last 4 digits of the patient ID are kept as a short hint. Cases are identified by a case identifier and this optional hint, which you can edit, not by full patient identity.
For scans sent through the PACS Gateway, the full patient ID isn't shown in the list of pending scans, and you must type it in to open a scan. See PACS Gateway & Pending DICOM.
Secure storage
Case files (imaging, 3D models, guides, reports) are stored in secure cloud storage.
Files are opened and downloaded through time-limited, signed links, so file access is controlled rather than openly available.
Access to a case is governed by your role and explicit shares. Organization Admins, Organization Back Office users, Organization Supervisors and Technicians see every case in their organization. Clinicians, Medical Assistants and Sales Reps see only the cases they created or that were shared with them. See Sharing a Case with Others.
Access controls
Sign-in is via secure authentication, including Single Sign-On (SSO) with SAML or OIDC where your organization has configured it. See Organization Settings & Single Sign-On (SSO).
Public links are view-only and expire after 30 days. To end a link sooner, contact CustoMED support. Only users who can share the case can create one.
Case actions (edit, approve, share) are permission-checked on every request.
In transit
Data moves over encrypted connections between your browser, the CustoMED application and storage.
Your part
Share cases only with people who need access, and remove people under People with Access when they no longer need it.
Use SSO and strong credentials; don't share logins.
Follow your organization's policies for handling clinical data.
Never enter real patient information in a demo case.