Nova is engineered to meet the operational, security and regulatory requirements of modern healthcare organizations in Kenya. From encryption and access controls to audit logging and resilient cloud infrastructure, every layer of the platform is designed with security, privacy and reliability in mind. Protecting health information is a shared responsibility. Crucibel is responsible for securing, maintaining and continuously improving the Nova platform, while healthcare organizations remain responsible for user administration, role-based access configuration, patient consent management and compliance with applicable legal and regulatory obligations within their own facilities.

For questions about our security practices, compliance posture, or to request copies of our policies and governance documents, contact our team.

As a healthcare technology company, Crucibel may operate as both a Data Controller and Data Processor depending on the nature of the processing activity and the relationship with our customers and partners. Our registration with the Office of the Data Protection Commissioner reflects our commitment to responsible data governance and to protecting the rights and privacy of individuals whose information is processed through our systems.