DOCUMENTS
Private by design.
Prescription and ID uploads are PDF-only and use a private-storage abstraction. They are not served through public links.
SECURITY
Designed to protect sensitive order information.
PAYMENTS
Stripe-hosted checkout.
Card details are collected by Stripe’s checkout page; Medicii does not store raw card numbers.
ACCESS
Role-based operations.
Customer and operations views are separated, and important actions are recorded in audit events.
IMPORTANT LIMITATION
Technical safeguards are not certification.
These controls are technical measures, not a claim that Medicii is automatically HIPAA compliant, FDA compliant, or compliant with any particular law. Production operation requires appropriate contracts, policies, access reviews, incident response, retention procedures, and independently verified service configurations.