Compliance
Every approval, connection and audit you will ever need.
Which authority gateways we are live on, which frameworks we are built to, where your data sits, and what each one covers.
Your region
Set from your IP, and changeable here. The marks below are the approvals that apply where you are.
MOHAP DoH Abu Dhabi Malaffi Shafafiya Muashir ADHICS Tatmeen
Registered, certified, connected
Abu Dhabi, UAE
Registry
What we are connected to, and for which product.
CONNECTION
APPLIES TO
AUTHORITY
STATUS
Malaffi health information exchange
EzPOS · EzRx · EzDx
DoH Abu Dhabi
NABIDH health information exchange
EzPOS · EzRx · EzDx
DHA
Riayati national health record
EzPOS · EzRx · EzDx
MOHAP
Riayati e-claims
EzPOS · EzRx · CCMS
MOHAP
Shafafiya & DHPO e-claims
EzPOS · EzRx · CCMS
DoH Abu Dhabi / DHA
NPHIES claims & eligibility
EzPOS · EzRx · CCMS
NPHIES, KSA
Tatmeen & RSD track and trace
EzPOS · eInventory
MOHAP / SFDA
UPP reimbursement
EzPOS · eInventory
DoH Abu Dhabi
ZATCA e-invoicing
AMS · EzPOS · eInventory
ZATCA, KSA
ADHICS controls
All products
DoH Abu Dhabi
Data and security
Where the data lives and who can reach it.
Residency
It depends on the product and how you run it: on your own server in your own facility, in cloud we host and manage, or a mix of the two. Ask us which applies to the products you are looking at.
Access control
Roles and rights per user, a full activity and login log, an ADHICS-aligned password policy and multi-factor sign-in. Support access is requested, logged and time-limited.
Continuity
Encrypted automatic daily backups, manual snapshots on demand, tested restores, and an EzPOS database that always sits on your own server, so the counter keeps dispensing when the line drops.
Reporting a concern
Think you have found a security issue? Tell us and the team will look into it.
Questions
What procurement usually asks.
Where is our data stored, and can we get it out?
That depends on the product and how you run it — on your own server, in cloud we host and manage, or a mix of both. Wherever it sits, encrypted backups run nightly, you can take a manual one at any time, and a full export is a support request rather than a negotiation.
Is anything hosted by you rather than by us?
It can be. Some products run on your own servers, some in cloud we host and manage, and some either way. Centralised claims, for example, can sit in our cloud so a back office reaches every branch without a VPN into each pharmacy. We will tell you which applies to the products you are considering.
What happens when an authority changes a rule mid-contract?
We build the change and ship it in a release before the deadline, at no extra cost — that has been the arrangement since 2005. Tatmeen, UPP, NPHIES and ZATCA all arrived this way.
Are you compliant with ADHICS?
Yes. Our software is built to ADHICS controls, and our systems have been part of more than 5,000 customer audits with no findings raised against the software.