Reporting a vulnerability

If you believe you have found a security vulnerability in a Litiqo product or on this website, please tell us before telling anybody else. Write to security@litiqo.com with enough detail to reproduce it.

We will acknowledge your report, keep you updated, and we will not pursue action against anyone who reports a genuine issue in good faith and does not access, alter or exfiltrate data beyond what is needed to demonstrate the problem.

Access control

Role-based access inside every platform, configurable down to branch and record type
Least-privilege access for our own staff, granted for a purpose and reviewed
Administrative access logged, with the log available to the customer on request
Separation between customer environments

Data protection

Encryption in transit for all traffic
Encryption at rest for stored data, where the hosting platform supports it
Backups taken on a defined schedule and restore tested rather than assumed
Data residency configurable per market where a customer requires it

Monitoring

Audit logging of security-relevant events
Monitoring of availability and of unusual access patterns
Patch and dependency management on a regular cycle

Incident response

If an incident affects customer data, we will contain it, assess it, notify affected customers in line with applicable law, and follow up with what happened and what changed as a result. We will not stay silent about an incident that affects you.

Your responsibilities

Security is shared. On your side that means:

one login per person, never shared between staff
removing access promptly when someone leaves
setting roles to the minimum each person needs
not sending customer or patient data in screenshots or over unsecured channels
telling us immediately if you suspect an account has been compromised

Certifications

Where a specific certification or a security questionnaire is required for your procurement process, contact us and we will tell you honestly what we currently hold and what we do not.

Contact

Questions about this document can be sent to legal@litiqo.com or through the contact form.

Entity: Medixcart FZC LLC, United Arab Emirates. Effective: 11 September 2026.

Security