Record-by-record protection
Protected by default
Each health record is protected separately, so one problem cannot expose everything.
Built for Africa. NDPA 2023 compliant
One identity. One record.Audited by design.
Every Fastclinic product inherits secure identity, an auditable ledger, and patient-controlled records from one shared platform.
Shared infrastructure
Product surfaces stay distinct. Their security primitives do not.
FastLogin
Identity
FastCredits
Ledger
OneHealth
Records
Doorcta
Care delivery
Every product inherits
IdentityLedgerRecords
Built on
NDPA 2023Nigeria Data Protection Act
NDPR-alignedNigeria Data Protection Regulation
FHIR R4HL7 standard health records
OAuth2 / OIDCStandards-based identity
AES-256-GCMPer-record envelope encryption
Platform
Four products. One platform underneath.
Each product solves a distinct healthcare problem. Identity, payments, records, and audit remain one shared foundation.
Shared foundation
Build the care surface once. Inherit the controls underneath.
Identity
FastLogin
Ledger
FastCredits
Records
OneHealth
What this means for you.
The technology stays in the background. You get clearer control, safer access, and records that can move with you.
Time-limited permission
You stay in control
Access is granted for a specific reason and time, and can be withdrawn when it is no longer needed.
Tamper-evident history
Access leaves a trail
Fastclinic records when protected information is viewed and keeps a history that cannot be quietly rewritten.
Open healthcare format
Built to move with you
Your records can be prepared in a recognised healthcare format for another provider or system.
Three people. The same infrastructure.
Patients, providers, and developers use different surfaces while inheriting the same platform guarantees.
Patient
- 01
Grant access
Authorise a verified provider for a stated purpose and duration.
- 02
Review activity
Every permitted read appears in the patient-visible audit history.
- 03
Revoke or expire
Consent closes immediately at revocation or scheduled expiry.
Provider
- 01
Open a scoped session
The session checks identity, purpose, consent, and available credits.
- 02
Read what is permitted
Each record access is scoped, timestamped, and hash-chained.
- 03
Close and reconcile
Completed usage is captured and unused held credits are released.
Developer
- 01
Register one OAuth2 client
Send users to FastLogin and receive standards-based scoped tokens.
- 02
Call shared services
Use the same identity context for balances, sessions, and record export.
- 03
Inherit the controls
Authentication, billing semantics, consent, and audit arrive together.
Take your health history with you.
Moving provider or keeping a personal copy? Request your records and download a secure package you can use outside Fastclinic.
Step 1
Request a copy
Choose the health information you want to include.
Step 2
We prepare it securely
Your care history, results, documents, and access history are collected into one protected package.
Step 3
Download or share
Keep it for yourself or provide it to another healthcare provider.
Organised for people, not file systems
Your health record package
- Personal and care information
- Test results and observations
- Consultation notes and documents
- Consent and access history
Protected while it is prepared. Organised so another compatible health system can understand it. Includes a simple guide.
Security you can verify, not just trust.
The controls are part of the platform architecture, not optional integrations added after clinical data arrives.
Per-record envelope encryption
Every record has its own AES-256-GCM key, sealed by a KMS-held master key. A compromise cannot cascade across the record store.
Hash-chained audit and WORM retention
Append-only events reference the previous hash. Daily roots are retained in write-once storage for seven years.
Phishing-resistant MFA
Passkeys, TOTP, and one-time backup codes protect every account without an SMS fallback.
Signed patient exports
Each DSAR archive includes an Ed25519 signature so patients can verify its manifest independently.
Consent-scoped access
Access grants are purpose-bound, time-boxed, revocable, and enforced before protected records are returned.
Nigerian governance, implemented in the platform
Fastclinic Limited (RC 1919428) operates under the Nigeria Data Protection Act 2023 and NDPR-aligned controls for identity, consent, audit, retention, and data-subject access.
Plain answers.
Direct answers about identity, credits, records, audit, compliance, and hosting.
See the shared platform in your own workflow.
Bring one facility, one care path, and your integration requirements. We will map the identity, billing, and records flow.