Security guide

Version 1 Published: 2026-06-09

Clivora protects data in several layers.

  • Encrypted transport: all network communication runs over HTTPS/WSS.

  • Bridge runs locally: the Bridge running on the workstation listens only on the 127.0.0.1 loopback address and is not reachable from any network.

  • Minimal token: the authentication token contains only an identifier, email and scope – no clinical data.

  • Encrypted storage: sensitive session data is stored encrypted.

Recommendations for users

  • Use a strong password and two-factor authentication where available.

  • Lock the workstation when you step away.

  • Only install the Bridge app on a trusted device.

Instructions for Use · Version 1.1 · Issued: 2026-10-22