Platform Architecture & Security
The Fulgent Digital Clinic platform is built on a secure, scalable cloud architecture designed to deliver safe, fast, reliable digital healthcare across devices. This page outlines our infrastructure, data protection measures, security systems, and operational safeguards that ensure patient information remains confidential and our services remain always available.
The Fulgent Digital Clinic platform follows a modular, cloud-native structure engineered for stability, speed, and resilience. Our system is designed with multiple layers that work together to support consultations, e-prescriptions, EMR management, medical reporting, and remote health services.
- Client Layer: Mobile devices, desktop browsers, and partner integrations.
- Edge Layer: CDN and global optimization to reduce load time and improve security.
- Application Layer: Microservice-based services for consultations, EMR, billing, pharmacy, and communication.
- API Gateway: Entry point that enforces authentication, request validation, and rate-limiting.
- Data Layer: Highly secured encrypted medical databases, storage vaults, and analytics engines.
- Integration Layer: Secure connections to labs, pharmacies, payment systems, and HPS Micro Health Insurance.
Protecting patient information is central to our mission. Fulgent Digital Clinic employs multiple encryption and privacy standards:
- Encryption in Transit: TLS 1.2/1.3 for all traffic; HSTS enforced.
- Encryption at Rest: AES-256 encryption for medical records, imaging files, and backups.
- Data Isolation: Separated databases for EMR, communications, financial records, and support logs.
- Device Security: Anti-tamper policies and secure token expiration to protect mobile users.
Only authorized personnel, clinicians, and verified patients can access sensitive areas of the system. We apply strict identity-proofing controls:
- Multi-Factor Authentication (MFA): Required for clinicians and administrators.
- Role-Based Access Control (RBAC): Doctors, nurses, health assistants, and support staff have clearly separated permissions.
- Session Security: Short-lived tokens to reduce risk of unauthorized reuse.
- IP & Device Monitoring: Abnormal login attempts automatically blocked.
Our platform is engineered for uninterrupted healthcare service delivery:
- Multi-zone Architecture: Services distributed across multiple cloud zones to avoid downtime.
- Autoscaling: Real-time scaling during high-traffic periods such as health campaigns.
- Load Balancing: Ensures fast access and distributes system workload intelligently.
- Zero-Downtime Updates: Rolling deployments prevent service interruptions.
Our systems are continuously monitored for performance, reliability, and security threats:
- Real-time Monitoring: Tracks service performance, error rates, and usage spikes.
- Audit Logs: Every EMR access, update, and clinical action is logged and monitored.
- Security Alerts: Automated detection of suspicious activities.
- 24/7 Oversight: Engineering and security teams ensure proactive issue response.
Fulgent Digital Clinic maintains strong data recovery processes to safeguard medical continuity:
- Daily Encrypted Backups: All medical data backed up automatically.
- Recovery Testing: Regular restoration tests to maintain reliability.
- Disaster Recovery Plan: Defined RTO and RPO targets.
- Geo-Redundant Copies: Data replicated securely across regions.
Fulgent Digital Clinic operates within the requirements of medical privacy regulations and healthcare compliance expectations:
- HIPAA-aligned security principles.
- GDPR-compatible patient privacy practices.
- Local health regulatory guidelines.
- Health data processing transparency and consent management.