Skip to content
TibbiLog

Security and privacy

Private by design, not by promise.

How we protect trainees’ data, and what we never collect.

What we store

Residents’ names and work email addresses, training records (dates, procedures, counts, roles, rotations) and the answers to your program’s case questions.

Patient details

Like a paper logbook, a case can carry a case ID such as a hospital number, with a patient’s age and sex. Programs whose policy forbids identifiers leave that question out of their form.

Who can see what

Residents see their own logs. Chief residents see their class. Program directors see their program. These rules are enforced inside the database, not just in the app.

Where data lives

During the pilot, data is hosted in the European Union. For institutions, hosting is agreed according to the country’s rules before go-live.

Retention

After graduation, residents keep read-only access for a set period and are reminded to download their data. Each program then chooses to delete, anonymise or retain.

Audit trail

Changes to cases, curriculum and settings are recorded in a log that cannot be edited.

Security reviews

We work with each institution’s IT and data-protection teams. Contact us to start a review.