Doctors
Applies to: Romania
Encrypted exchange of medical reports
Send reports to patients and colleagues and request documents – encrypted, no patient account needed. TEPHIA transfers files case by case; it does not replace the electronic health record (DES), e-prescriptions or the PIAS systems.
- Developed & operated in Germany
- End-to-end encrypted
- Professional secrecy in our contract
- Signed proofs of delivery
What your professional rules require
Information on the patient’s condition, test results, diagnosis, prognosis and treatment, as well as their personal data, is confidential. It may only be disclosed with the patient’s consent or where the law expressly requires it.
Medical secrecy: you may pass information to people and institutions not involved in the patient’s care only with the patient’s written consent. Choose file names and messages that do not refer to patients.
For patient data, the law provides for the electronic health record (DES) and systems compatible with the health insurance IT platform (PIAS). TEPHIA replaces neither the DES nor e-prescriptions; it is for exchanging individual files case by case.
Anyone who, without authorisation, discloses data or information learned through their profession or position that they are obliged to keep confidential faces three months to three years’ imprisonment or a fine. Prosecution requires a complaint by the injured party.
How TEPHIA SECURE meets them
Medical confidentiality in the contract
In clause 5b, our data processing agreement commits us to secrecy about all your patients’ matters to the extent your professional rules require, and limits access to what the service needs. Everyone involved is bound in writing in the same way before starting work. You conclude the agreement electronically and receive a copy as a PDF.
State of the art
AES-256-GCM encryption in the sender’s browser, with the key derived from the password using Argon2id. The server holds no key and cannot read the contents.
No account needed for recipients
Patients do not need an account. Patients and colleagues can send you reports and documents through an upload box, with the same protection and the same proof of delivery.
Verifiable proof of delivery
Each entry is cryptographically chained to the previous one. The proof of delivery is a signed PDF/A with a timestamp from an independent time-stamping authority.
How your proofs are secured
| In every planSignature with our certificate | Add-on · coming soonQualified electronic seal | |
|---|---|---|
| Any change to the PDF invalidates the signature | included | included |
| Timestamp from an independent authority | included | included |
| Hash chain with daily chain seal | included | included |
| Checksum (SHA-256) of every file, confirmed by the recipient | included | included |
| Verifiable online, without an account | included | included |
| Display in Adobe Reader | “Validity unknown”1 | Valid |
| Legal presumption of authenticity (Art. 35(2) eIDAS) | not included | included |
| Useful for | Your records, clients | Courts, authorities, the other party |
1 Not an error: our certificate is not on the EU trust list that Reader recognises. You can check integrity online or using the certificate fingerprint.
- Signature: any change is detected
- Timestamp from an independent authority
- Hash chain with daily chain seal
- Checksum of every file, confirmed by the recipient
- Verifiable online, without an account
- Adobe Reader shows “Valid” instead of “Validity unknown”
- Legal presumption of authenticity (Art. 35(2) eIDAS)
- Useful for courts, authorities, the other party
There is no certification of services like this by a professional body, and carefully selecting a service provider remains your responsibility under your professional rules.
The information on the legal position on this page is general information, without any warranty as to completeness or currency, and does not constitute legal advice. Only our contracts are binding.