Security & compliance

Patient data, treated like patient data.

The unglamorous parts of clinical software, done properly - because your practice's due-diligence questions deserve real answers, not badges.

Stored in Australia

Patient records are stored on a server in Melbourne, with nightly backups kept in Australia, in line with the Australian Privacy Principles. No outside service reads or analyses patient records: there is no external OCR, AI or document processing.

Isolated & encrypted per clinic

Each clinic runs in its own database with its own encryption keys. There is no shared patient table to breach - one clinic's data is structurally unreachable from another's.

An audit trail you can read

Staff and two-factor changes, changes to claiming, pricing and your privacy notice, blocked sign-in attempts, and anything our team does through the onboarding tools are logged with who and when, and visible in your own dashboard. Our onboarding tools are technically restricted to configuration; they cannot read patient records.

Clinicians decide, always

Risk flags are suggestions requiring clinician confirmation. Patient answers are shown beside published clinical criteria - the software never outputs a score, classification, or recommendation of its own, and nothing clinical is ever auto-committed to a record.

Where PreopHQ sits

Administrative software, on purpose.

PreopHQ is clinical workflow and intake administration software: it collects patient-provided information, organises it against published standards (such as the STOP-BANG screening criteria and WHO BMI reference bands), and records the decisions practitioners make. It deliberately does not perform screening, scoring, diagnosis, or treatment recommendation - those judgements belong to the practitioner, and the product is designed so that boundary cannot blur.

The same boundary applies to money. PreopHQ prepares fee estimates and accounts from the items the anaesthetist selected, and lodges a Medicare patient-rebate claim through your own Tyro Health account when your office asks it to. It never collects a payment, never holds or moves money, never bulk-bills and never claims from a health fund, and it never chooses an item or a fee. Your terminal, your bank account and your claiming account remain your own.

For how personal information is handled in detail, read our privacy policy. For anything else, ask us directly - due-diligence questions from practices are welcome: hello@preophq.com.au.

Due diligence

The questions your practice manager will ask.

Where is patient data stored?

On a server in Melbourne, Australia. Nightly backups are kept in Australia as well.

Is our clinic's data separate from other clinics'?

Yes. Each clinic has its own database and its own encryption key. Patient details, answers, attached files and stored PDFs are encrypted with that clinic's key. There is no shared patient table.

Can PreopHQ's team read our patient records?

The onboarding tools our team uses connect with a database account that is only permitted to touch configuration, so the database itself refuses a read of patient records. Everything our team does through those tools appears on your own audit trail. PreopHQ also operates the server that hosts your clinic's database, as any hosting provider does; work on the server itself, such as updates and backups, is not on that trail.

What leaves Australia?

Patient records are stored in Australia. Two things can travel outside it, both through services you choose: email, which can carry a document such as a patient's copy of their questionnaire, is sent through your clinic's own Google mailbox, and Google may handle email outside Australia; and if you connect your own Google Drive, the copies you send there are stored by Google. SMS is sent through ClickSend, and a Medicare claim goes to Medicare through Tyro Health. Every patient form carries your clinic's privacy notice, which tells patients where their information goes.

How do staff sign in?

Each person has their own account. A one-time code at sign-in, by email or SMS, is on by default for accounts created in your dashboard and for clinic admins, and a clinic admin can switch it off for an account. Repeated wrong passwords lock the sign-in for up to fifteen minutes, and each lock is recorded on your audit trail.

Who holds the money and the Medicare account?

You do. Patients pay on your own terminal or into your own bank account, and claims go through your own Tyro Health account. PreopHQ is paid a flat monthly fee and never holds or moves your money.