Authentication
Sign-in with Microsoft Entra ID. Access stays closed by default: without a valid identity no data leaves, and the application role stored in the database prevails.
Security
GDPR and health data hosting have been part of NeuroTrack's foundations since the first line of code.
HDS hosting
Azure France Central
Sign-in
Microsoft Entra ID
Encryption
AES-256-GCM
Audit log
Sensitive access traced
Six safeguards
You only get in with a valid identity, and everyone sees only what their role allows.
Sign-in with Microsoft Entra ID. Access stays closed by default: without a valid identity no data leaves, and the application role stored in the database prevails.
Five roles, an automatic scope per organisation and an ownership check before every change.
Diagnosis and date of birth are encrypted with AES-256-GCM, with a key held in Azure Key Vault.
Sensitive reads, writes and deletions are recorded in an audit log.
Application and data in the Azure France Central region, on HDS-certified infrastructure. Logs kept for three years.
Soft deletion, automatic anonymisation of inactive patients and purge beyond the legal period.
Five roles
The interface hides what a role cannot do; the server refuses it whatever happens.
Patient
Takes their sessions in a dedicated window.
Physician / Clinician
Builds the care plan and follows their patients.
Service manager
Runs the activity of their service.
Clinic administrator
Organises the clinic.
NeuroTrack administrator
Maintains the shared reference data.
Accessibility

Contrast, keyboard navigation and screen readers checked continuously.
The interface flips without breaking the layout.
The patient sets the exercise text size up to 150%.
Answer areas of at least 44 pixels, by finger or mouse.
The technical foundation
Request a demo
A video demonstration, tailored to your practice and your organisation.
Already a customer? Sign in with your Microsoft work account.
Mapping Minds, Tracking Progress