Security
Security Built In: Two-Factor, Passkeys and Immutable Audit Logs
AED Log's software security starts at sign-in, with two-factor authentication, passkeys and an account-wide two-factor requirement. Every change is written to an activity log that can't be edited, and files and patient details stay private.
45 days free. No credit card required. Then plans from $114 a year.
How sign-in protection works
Every user can add two-factor authentication or passkeys, and managers can require two-factor sign-in for everyone on the account.
Two-factor with an authenticator app
Turn on an authenticator app and keep the eight one-time recovery codes for the day the phone goes missing.
Passkeys and passwordless sign-in
Register a passkey such as Face ID, a fingerprint or a security key, and sign in with it instead of a password.
Require it for the whole account
Managers can require two-factor sign-in for every user, see who has enrolled, and reset a user who is locked out.
Passwords and sessions
Changing a password requires the current one and signs out every other device. Dates show in each person's own time zone, detected automatically.
What the activity log records
The activity log is a permanent, searchable record of who did what, when and from where, and nobody can edit or delete it.
Who made each change, and when
What changed, from an inspection to a role
The IP address and device it came from
Report downloads and label printing
Support actions taken for you, clearly marked
Filter by date, person, action or location, or search by a device name or serial number. Sensitive values stay hidden from people without permission to see them.
How your files and patient details are protected
Files are kept in private storage, and patient details are limited, restricted and kept out of the logs.
Documents, certificates and inspection photos are stored privately. Each download uses a signed link that expires after a short time; only branding images such as your logo are public.
The patient section of an incident report holds only an age range, sex and notes. Only Account Owners and Administrators can see it, the server enforces that on every request, and it is left out of the activity log. AED Log is not a medical records system.
Every request is limited to your own organization's records on the server, and the application sits behind Cloudflare. Our privacy policy explains what personal information we collect and how we use it.
Who it is for: municipalities and dental offices
Security matters most to organizations with strict IT or privacy rules, such as municipalities and dental offices.
Related guide: what AED program management covers
For how record-keeping and access fit into running an AED program, read the AED program management guide.
AED program management guide Team roles and location access Audit trail report
AED Log security FAQ
Does AED Log support two-factor authentication?
Yes. Users can turn on an authenticator app, with 8 one-time recovery codes, or register passkeys such as Face ID, a fingerprint or a security key. Managers can require two-factor sign-in for the whole account.
Does AED Log support single sign-on (SSO)?
No. AED Log doesn't offer SAML or OIDC single sign-on. Sign-in is protected with two-factor authentication and passkeys, including passwordless sign-in with a passkey.
How is patient information in incident reports protected?
The patient section is limited to an age range, sex and notes. Only Account Owners and Administrators can see it, the server enforces that, and it is left out of the activity log.
Protect your AED program records
Two-factor sign-in, passkeys and a permanent activity log on every plan.
45 days free. No credit card required. Then plans from $114 a year.