Security Practices
Sports Med Flow Pro is built to support Athletic Trainers who handle protected health information and student education records. These are the safeguards in the product today.
Workspace isolation
Every trainer account has its own workspace. Records are filtered at the database level, not just hidden in the interface, so another account cannot reach them even by guessing an address.
Signed notes stay with their author
Signed clinical notes and their PDFs are readable only by the trainer who created and signed them. District administrators manage seats and billing and cannot open medical records.
Permanent access log
Opening a profile, downloading a signed note, amending a visit, and signing in are all written to a log that cannot be edited or deleted by any account.
Private file storage
Uploaded documents, signed PDFs, and credential files live in private storage and are opened through links that expire in about a minute.
Session safeguards
Sessions end automatically after ten minutes of inactivity, and a trainer can sign out of every device at once. Passwords are checked against known breached password lists.
On-device facial matching
Kiosk face check-in matches on the device and stores only a numeric signature. No face photographs are ever kept.
Reporting a vulnerability
If you believe you have found a security issue, contact your workspace owner with the details and steps to reproduce it, and please do not access records that are not yours while investigating.