SimpleumSafe in alternative therapy practice

Protect practice documents.Keep health data confidential.

Keep findings, treatment notes, consent forms and billing documents encrypted on Mac, iPhone and iPad, as a supplement to your primary treatment record.

Laptop, document folder and notebook – illustration of a digital filing system.

Health data needs a protected place

Medical histories, findings, treatment notes, consent forms, laboratory reports and billing documents contain highly personal information. If you organise selected files yourself on Apple devices, SimpleumSafe provides a separate encrypted space for them.

You can arrange documents by patient, treatment or period and find them again later. You still need to determine which documents belong in the treatment record, who may access them and when retention or deletion applies.

Everyday tasks

Folder containing documents.

Keep findings and notes together

Store selected medical histories, laboratory reports and treatment notes in an organised encrypted space.

Notebook and pen.

Link consent and billing files

Find forms, cost information and supplementary correspondence by patient or treatment.

Smartphone above a paper document.

Capture paper documents securely

Capture approved documents with iPhone directly into the Safe without storing them in the general photo library.

An encrypted space alongside your practice system

SimpleumSafe supplements your existing records with a protected space for selected files. Its Finder-like interface on Mac makes storing and organising them easier. No cloud is required for local use; encrypted synchronisation between your own devices is optional.

Practice management, appointments, billing, patient communication and the primary treatment record remain in the systems and processes intended for those functions. Decide which document version is authoritative and how edited files return to the complete record.

Assess health data and treatment records separately

Information about physical or mental health is special category data under Article 9 GDPR. Each purpose requires a valid legal basis; consent, access, retention and deletion belong to the complete practice process. Article 32 names encryption as one possible measure within risk-appropriate safeguards. The software alone does not make the process GDPR-compliant.5

German Civil Code section 630f requires treatment records to be documented promptly and changes to remain traceable. Records generally need to be retained for ten years after treatment ends unless another rule sets a different period. Supplementary file storage must not undermine those requirements. SimpleumSafe's integrity checker does not establish completeness, audit-proof record keeping or legal compliance.27

Data protection and security in detail

How does SimpleumSafe protect selected practice documents, and what still needs to be organised? Open the topic you would like to explore. The legal references below concern Germany and the EU GDPR.

Encrypt files and file names

SimpleumSafe protects file contents and file names using AES-256. A closed Safe therefore does not reveal which patients or treatments it contains through its file list.1

Encryption protects storage. It does not determine whether a file may be collected, belongs in a treatment record or must be deleted after a period.5

Protect access to practice documents

You open your Safe with its password or, where supported and configured, biometric authentication. A strong dedicated password, a protected up-to-date device and clear permissions go hand in hand.

Readable content may be accessible on an unlocked or compromised device. Define access for staff, cover arrangements and a practice handover too.15

Check stored data technically

The integrity checker examines the Safe's internal structure and links to stored file data. Additional options check whether files can be read and decrypted.

A successful check does not establish that a treatment record is complete, accurate, immutable or legally compliant.27

Prepare backups and emergency access

Back up your Safes regularly and independently of your working device, for example to separate storage. Files remain encrypted in a complete Safe backup too. Check that the backup can be restored.

Create a recovery password in advance and keep it safe, separate from the device. It does not replace a backup or restore deleted files.1

Respond to loss or theft based on risk

Effective encryption can prevent unauthorised people from reading a lost device or stolen Safe copy. The assessment depends on whether credentials, key material or an unlocked device are also affected.

Communication to affected individuals is generally required where a breach is likely to result in a high risk. Under Article 34(3)(a), effective encryption can make it unnecessary. Notification under Article 33 must be assessed separately; the incident still needs to be documented.5

Synchronise your own devices in encrypted form

SimpleumSafe can be used locally without a cloud. You can optionally synchronise configured Apple devices in encrypted form, through iCloud or directly between devices; a shared folder is also possible between Macs.

Synchronisation propagates deletions and unwanted changes and is not a backup. Cloud contracts and data protection requirements must be assessed separately. Encryption does not automatically remove the need for a required data processing agreement.36

Capture paper documents directly into the Safe

Using the camera in SimpleumSafe for iOS, you can save paper documents or supplementary images directly in the Safe without putting them in the general photo library.4

Check purpose, legal basis and necessity before every capture. Return documents relevant to treatment to the intended treatment record.57

Account for imports, editing and exported copies

After import, an original may remain at its previous location. Importing does not retroactively protect copies in email, Downloads, a scanner or practice system.

A file must temporarily be readable for editing; the editing application may create copies or cloud backups. Exporting or sharing creates a decrypted copy outside the Safe. Include every copy in access, retention and deletion processes.45

Sources and product documentation
  1. SimpleumSafe: Security and Encryption method – access, file information, backups and recovery passwords.
  2. SimpleumSafe: Integrity checker – scope and additional options.
  3. SimpleumSafe: Extreme secure synchronisation – device synchronisation and limitations.
  4. How SimpleumSafe works and Take photos directly into the Safe.
  5. GDPR, particularly Articles 5, 9, 28 and 32–34.
  6. EDPB Guidelines 07/2020, “Hosting services” example, p. 16 – storing encrypted data on behalf of a controller.
  7. German Civil Code section 630f: treatment documentation – treatment records, changes and retention (in German).

Selected practice documents on your Apple devices

Would you like to organise findings, notes, consent forms or billing documents in supplementary encrypted storage? Explore SimpleumSafe and find the right purchase option.

What you can do with SimpleumSafe

Learn more about the features and protection for your files on Mac, iPhone and iPad.