Patient information under special-category rules
Health data carries the heaviest protection European law provides. "Encrypted in transit and at rest" describes almost every product on the market and does not answer the question of who can read it.
Healthcare teams have to keep patient discussion confidential and keep operational records available, and most platforms make you choose one. Enclessa separates them: direct and group direct messages are end-to-end encrypted, so clinical conversation is unreadable to the server and to us, while operational channels stay server-readable and therefore searchable, retainable and exportable. The People module records absence without a diagnosis field, because a collaboration platform has no business holding one.
Open betaThe platform is being built in the open, so parts of it are not there yet, behaviour changes between releases, and no availability figure is committed while it is in beta. What is still being built.
At a glance
- Clinical discussion
- End-to-end encrypted direct and group messages
- Operational channels
- Server-readable, searchable, exportable
- Sickness records
- No diagnosis field exists
- Hosting
- European Union
- Certification
- None claimed — see the security page
The constraints this sector actually has
Shift work means asynchronous handover
The people who need the message are rarely at a desk when it is sent. Notification control that respects a night shift is not a nice-to-have.
Operational records still have to be findable
Rosters, equipment, escalation and estate management are not clinical, and burying them in encryption makes them unusable for no protective benefit.
Staff records are their own regime
Personnel data, sickness and absence carry duties distinct from patient data and should not live in a spreadsheet on somebody’s desktop.
What Enclessa does about them
What that looks like on a working day
A data-subject access requestWhat Enclessa can produce about one person, what it cannot, and why the encrypted rooms are the honest part of the answer.Read the use caseOnboarding a new colleagueOne record that provisions the accounts, the teams, the boards and the working time, instead of a checklist somebody executes by hand.Read the use case
Questions
Healthcare: common questions
Can healthcare teams discuss patients in Enclessa?
Direct messages and group direct messages in Enclessa are end-to-end encrypted, so their content is not readable by the server or by us. Whether a particular use is permitted is a decision for your data protection officer, and it depends on your own processing agreement and risk assessment, not on a claim made on this page.
Is Enclessa HIPAA or ISO 27001 certified?
No. Enclessa holds no compliance certifications today, and the security page says so plainly. What it offers instead is a published architecture, data model and API surface that a reviewer can check, and encryption that follows MLS per RFC 9420 rather than a design of our own.
Does Enclessa store why somebody is off sick?
No. Sickness is recorded in the Time module as an absence with no diagnosis field, so there is nowhere for a medical reason to be entered.
Encrypted collaboration, hosted in Europe.
Create a workspace in a couple of minutes. It is yours at your-team.enclessa.app, hosted in the European Union, with encrypted direct messages from the first one you send.
Open beta. Free plan, no payment card to start.