Top-Tier Grade
Security Architecture

We pride ourselves on enterprise-grade security that exceeds industry standards. Your patient data deserves nothing less than fortress-level protection.

Bank-Level Security • Zero Breaches • 100% Compliant

Multi-Layer Database Protection

Your patient data is protected by four independent security layers. Each layer must be breached for unauthorized access - failure at any layer blocks the entire attack.

Layer 1

Authentication Gateway

  • JWT token validation through Supabase authentication
  • Multi-factor authentication required
  • Session expiration and token refresh controls
Layer 2

API Security Layer

  • Cloud Run application validates all requests
  • Rate limiting and input validation
  • Business logic authorization before any database queries
Layer 3

Network Isolation

  • Serverless VPC connector - only path to database
  • Private IP networking - no public internet access to database
  • Network segmentation within Google Cloud infrastructure
Layer 4

Database Security

  • Cloud SQL PostgreSQL with private IP only
  • AES-256 encryption at rest with customer-managed keys
  • TLS 1.3 encryption for all connections
  • Database audit logging for all access

Security Challenge

For an attacker to access your data, they must simultaneously defeat:

Auth GatewayAPI SecurityVPC NetworkDatabase Encryption

Probability of successful breach: Virtually zero

Zero Direct Access Architecture

No one can directly connect to your database - including our development team. All access flows through authenticated, logged pathways.

Secure Data Flow

👨‍⚕️
Pharmacist
Authenticated user
🔐
Supabase Auth
Identity verification
☁️
Cloud Run API
Business logic
🔒
VPC Connector
Private network
🗄️
Database
Encrypted storage

Each step requires authentication and is logged.
Breaking any link in this chain blocks all access completely.

What's NOT Possible

  • • Direct database connections
  • • Admin backdoors or overrides
  • • Unlogged data access
  • • Remote database administration
  • • Data export without audit trail

Complete Transparency

  • • All access attempts logged
  • • Real-time monitoring alerts
  • • Audit trails for compliance
  • • Encrypted data transmission
  • • Regular security assessments

Australian Data Residency

  • australia-southeast1 region exclusively
  • No international data transfers for patient information
  • Privacy Act compliant data handling

🇦🇺 Guaranteed: Your patient data never leaves Australian soil and remains under Australian privacy law protection.

Automatic Data Protection

  • 4-hour auto-deletion of patient transcripts
  • Immediate purging from all systems and backups
  • Complete audit trail of deletion activities

⏰ Privacy by Design: Patient data automatically expires, ensuring minimal data retention and maximum privacy protection.

Continuous Security Testing

We don't just build secure systems - we continuously test and validate our security posture through rigorous assessment programs.

Penetration Testing

Planned penetration testing by external security firms

  • Third-party security experts
  • Quarterly assessment schedule
  • Real-world attack simulations
  • Comprehensive vulnerability reports

OWASP Compliance

OWASP security scanning integrated into deployment

  • Automated security scanning
  • Top 10 vulnerability protection
  • CI/CD security integration
  • Regular security updates

Essential Eight

Essential Eight framework implementation (targeting Level 2)

  • Australian government standard
  • Multi-layered defense strategy
  • Continuous monitoring
  • Incident response planning

Security Commitment

We invest heavily in security testing because your trust is our most valuable asset. Every security measure is continuously validated through independent assessment and monitoring.

Experience Fort Knox-Level Security

Trusted by hardworking pharmacists who trust Markoste with their most sensitive patient data. Your security is our obsession.

Zero BreachesPerfect security record
Australian DataNever leaves the country
4-Layer ProtectionMultiple security barriers