Security

Diastema is built so that your patient data stays in your office.

It runs on your own server, next to Open Dental. Computers, iPads and phones reach it through one secure address, encrypted all the way to your server: our servers pass it along but can’t read it.

Your office server Open Dental Diastema diastema.app passes it along, can’t read it Your devices each one approved Patient records stay here Encrypted from each device to your server

It runs on your server

Diastema runs on your office’s own server and reads your own Open Dental through Open Dental’s official API. Your patient records aren’t copied to our servers.

One secure address, encrypted to your server

Every computer, iPad and phone uses your office’s own address. Your server holds the certificate, so the connection is encrypted from each device all the way to it, and each device has to be approved by your office once.

PIN sign-in and access levels

Each staff member signs in with a PIN, and access levels decide who sees the numbers and who can change settings.

Open Dental keys are encrypted

The keys Diastema uses to reach Open Dental are stored encrypted on your server.

Backups only you can open

Diastema backs up its own data every night, locked with your office’s recovery code. If you keep an off-site copy with us, it’s the same locked file, and the code never leaves your server, so we can’t open it.

Updates are signed

Every Diastema update is signed, and your server checks the signature before installing it. If an update causes trouble, it can be rolled back.

A business associate agreement with every office

You sign our business associate agreement as part of setting up your office, before Diastema starts. See our privacy notice for what we collect.