Security & compliance
Built for clinics that take patient data seriously.
- Role-based access control with granular permissions per module and action
- Login IP allowlisting built into the LuxeFlow platform — enforced for clinic tenants today; self-service allowlist management in Settings is rolling out soon
- Accounting period locks to protect closed books (with payment-date rules for collections)
- Encrypted integration secrets for Gmail and Google Drive
- Soft-delete with admin audit for bills and records
- Client digital signatures stored on package session completion records
- Deploy on your infrastructure or managed hosting
- HTTPS everywhere with tenant-isolated backends and databases