From the clinic website, patients can find the servers your patient-management system runs on – hosted, secured, and supported by Tremhost engineers in Harare, with patient data handled in accordance with Zimbabwean law.

Healthcare IT has two jobs: helping patients find and contact you, and keeping patient records available and confidential. Tremhost does both for Zimbabwean hospitals, clinics, laboratories, pharmacies and specialist practices; websites and staff email for the first, secure hosting, backups and cybersecurity for the second.

Zimbabwe’s Cyber and Data Protection Act treats health information as sensitive data. It should be processed under a health professional’s supervision, generally needs the patient’s written consent unless an exception such as medical treatment applies, and moving it outside Zimbabwe requires notifying POTRAZ first. A breach must be reported to POTRAZ within 24 hours of becoming aware of it.

So the first thing we tell every health client is where their systems will sit. We sign a data processing agreement that sets out how we handle your data, and we configure access controls, encryption, backups, and logging so your data protection officer has the evidence they need.