Security, POPIA and your patient data

Last updated:

Navitas is cloud practice management software for South African health practices. Patient records are sensitive, so Navitas is built to help you meet your obligations under the Protection of Personal Information Act (POPIA).

How Navitas protects patient data

  • Encryption: patient data is encrypted, and all communication with Navitas runs over a 256-bit encrypted SSL connection.
  • Regular backups: practice data is backed up regularly. Because Navitas is cloud based, nothing is lost if a laptop or phone is lost or stolen.
  • Secured servers: Navitas servers are kept in a controlled, secured environment.
  • Access control: each practitioner and admin user has their own login, and you decide who has access to your practice.
  • Restricted staff access: Navitas limits access to personal information to staff and contractors who need it to provide the service.
  • Audit trail for multi-practice managers: with the Practice Manager add-on, every switch between practices is logged.

POPIA compliance

Navitas Concepts (Pty) Ltd is a South African company and processes personal information in line with POPIA. Navitas does not disclose material in your practice account to anyone else without your permission, unless the law requires it or it is needed for a patient's emergency treatment. See the privacy policy for the full details, including data-subject rights and how to contact the Information Regulator.

Navitas Gold also includes digital intake and consent forms with e-signatures, so you can record patient consent electronically.

Your data stays yours

  • You keep all rights to the data you put into Navitas.
  • You can export your practice data at any time.
  • If you cancel, you keep access until the end of your billing period, and your data stays available for export for 30 days afterwards.

See the terms and conditions for the full terms.

Frequently asked questions

Is Navitas POPIA compliant?

Yes. Navitas Concepts (Pty) Ltd is a South African company and processes personal information in line with the Protection of Personal Information Act 4 of 2013 (POPIA), as set out in the Navitas privacy policy.

Is patient data in Navitas encrypted?

Yes. Patient data is encrypted, and all communication with Navitas runs over a 256-bit encrypted SSL connection.

Is my practice data backed up?

Yes. Navitas backs up practice data regularly, so your diary, patient records, notes and invoices are not lost if a device is lost or damaged.

Can I export my data from Navitas?

Yes. You can export your practice data at any time. You keep all rights to the data you put into Navitas.

What happens to my data if I cancel Navitas?

You keep access until the end of your billing period, and your data stays available for export for 30 days after cancellation.

Who can see patient records in Navitas?

Only the practitioners and admin users you give access to in your practice. Navitas restricts its own access to personal information to staff and contractors who need it to provide the service, and does not disclose your practice's records to anyone without your permission unless the law requires it.

Start free on Navitas Green

No credit card, no setup fee and nothing to install. Unlock a 14-day free trial of Blue or Gold from inside your account.