What tenant-isolated patient data actually means
Tenant isolation means every clinic on a shared platform can only ever reach its own data. Each record is tagged with the clinic that owns it, and every query is scoped to the signed-in clinic, so one clinic cannot read, list or search another clinic's patients, invoices or documents even though they use the same application.
2026-08-26 · 5 min read
Shared platform, separate data
Multi-tenant software is efficient: one codebase, one upgrade path, one security team. The risk it introduces is leakage between tenants, which is why isolation has to be enforced in the data layer rather than in the user interface.
EzClinic scopes records to a clinic at the database level and stores uploaded documents in tenant-isolated storage that only authenticated staff of the owning clinic can open.
What to ask your vendor
- Where is isolation enforced — the interface, or the database?
- Are uploaded medical documents access-controlled per clinic?
- Is there an audit trail of who viewed a patient record?
- How is staff access limited by role?
- Are backups isolated the same way as live data?
Why it matters for consent and compliance
Isolation is the foundation for the rest of your compliance story. Without it, an audit trail only tells you who looked at a record inside your clinic — not whether anyone outside it could.
See EzClinic in your clinic
Every plan includes a 10-day free trial with no credit card required. Compare plans or send us a message and we will help you choose.