Features · Safety and continuity

Built so that the record can be trusted.

One clinic’s data is walled off from another’s by the database itself. Money, stock, notes and the audit trail can be added to but never changed. And the work carries on when the connection does not.

What matters most

Private by design, recorded forever, and still working when the internet is not.

Each clinic's data is walled off

The database itself refuses to show one clinic's rows to another. It does not depend on the application remembering to filter.

Permanent records

Journal entries, stock movements, notes and the audit trail cannot be changed or deleted, only added to.

Your data is yours

Download every patient, appointment, note and list, restricted to named roles and logged.

The full list

Everything else PixelCare does here.

  • Sign-in protection

    Repeated wrong passwords lock the account, for staff and for patients.

  • Two desks at the same instant

    Two tills selling the last strip, or two receptionists booking the last slot, are tested and settled correctly.

  • Two-step sign-in

    A second step at sign-in for staff.

  • Privacy controls

    Recorded consent, retention periods by record type, masked identity numbers, encryption of sensitive fields and a tamper-evident audit trail.

  • Works through a power cut

    The till keeps selling and the day list is on paper; work done offline posts itself when the connection returns.

  • Backups you can restore

    Automatic backups, with restores tested.

  • Independent security review

    The system is reviewed for security before any clinic's real records go in.

  • API and webhooks

    A documented interface and event push for labs, accounting packages and websites.

See it from every seat.

The live demo is a working clinic with sample patients, stock and seven weeks of history. Enter as the owner, the receptionist, the doctor, the pharmacist or a patient.