Trust
Protection built into every step. Checked, encrypted, on the record.
Files are checked before anyone can open them. Every request is checked against who is asking and what they may see. Health data is encrypted in transit and at rest, hosted in the EU (Frankfurt), and every view of it is recorded.
What trust makes possible
Everyone can take part in care, with access that fits their role and permissions.
Control who helps with your care and see current permissions. Patient-facing access history is still in development.
Keep private work separate from shared care, and delegate without exposing more than needed.
Help run the day without seeing information you do not need.
Work within defined project boundaries, with recorded use.
In Practice
What protects every account, on every plan
The same safeguards come with every plan, Free included. Where something is still being built, we say so.
Files you upload
Every file is checked before anyone can open it.
- The real file type is confirmed from its content: PDF, JPEG, PNG or WebP only.
- Hidden location data is removed from photos before they are stored.
- Each file gets a fingerprint that is checked again before every download.
- Files open only as downloads, through a signed link that expires within minutes.
- Malware scanning, with files held unopened until they are scanned. In development
Encryption and hosting
Nerida Health encrypts data in transit and at rest, hosted in the EU (Frankfurt).
- Message text gets a second layer of encryption, with a separate key for each conversation.
- Identity numbers are stored encrypted and shown masked.
- Mood and cycle entries are encrypted before they are stored.
- Encryption keys are managed and rotated; backups are encrypted with their own key.
Who can see what
Access is checked on every request, not hidden behind a button.
- Only people linked to your care can reach your record, and only for what their role allows.
- Assistants and carers see only what they are given. Removed access stops on the next request.
- Private notes, shared care and practice work stay apart.
- Nerida staff cannot browse health records. Support access needs your consent, and it expires.
On the record
Every view of health data is recorded before it is shown.
- If the record of a view cannot be written, the information is not shown.
- The audit trail cannot be edited or deleted from within the application.
- Corrections are added to the record; nothing is silently overwritten.
- Patient-facing access history is in development and not yet complete. In development
Your account
Sign in safely, and leave when you choose.
- Sessions use secure cookies that page scripts cannot read.
- Doctors can protect their sign-in with a second step.
- Patients can delete their account themselves, usually with 14 days to change their mind.
- Small groups are hidden in every report, so individuals are harder to single out.
- Sign-in with a passkey. In development
The platform runs on fictional data only until clinical, legal and security review is complete.
Go deeper
The detail, for readers who want it
Nerida separates private clinical work, shared care, practice operations and research access. Each boundary is enforced by role and permission, with sensitive access recorded and corrections preserving history.
The deployed service will complete production-readiness work and independent security, clinical and legal review before live care begins. Development uses fictional data only. No real patient data is on the platform until clinical, legal and security review is complete.
This Website
The site holds itself to the same standard
Nerida collects no information directly through this static website: no cookies, no analytics, no third-party code, no forms. Our hosting provider processes standard technical request data to serve pages; the privacy notice describes this precisely.
Questions about security or privacy?
Security researchers and privacy-minded doctors are welcome to get in touch.