Security & privacy, in plain words

Your pharmacy's records stay on your own computer. This page lists what the app does to protect them, what it does not do yet, and what remains your job.

About certifications

Bin Aziz Pharmacy POS is not certified by any organisation, and we do not display a compliance badge. We say this clearly because badges are easy to copy and hard to check.

HIPAA is a United States law for US healthcare providers and their business partners. It has no software certificate and no official logo, so no program can honestly be called “HIPAA certified”. It also does not apply to a pharmacy in Pakistan. We built the app around the same good habits (limited access, an audit trail, backups, no unnecessary data sharing), but we do not claim HIPAA compliance.
Pakistan has no general data-protection law in force at the time of writing; a Personal Data Protection Bill has been drafted but not enacted. Pharmacies still have duties under drug-sale and controlled-drug rules (DRAP, provincial drug laws). The app keeps a controlled-drug register to help with those records. Following the law remains the pharmacy's responsibility.
Formal certificates such as ISO/IEC 27001 are held by organisations after an audit, not by a download. We have not had such an audit. If one is ever completed, we will publish the certificate and the auditor's name here.

What the app does

Data stays with you

Sales, stock, customers and staff records are stored on your computer, not on our servers. License checks send only your license key, a one-way hardware code and the app version.

Staff logins and roles

Every person signs in with their own PIN. The owner decides who can sell, change prices, see reports, manage staff or restore backups. PINs are stored scrambled (bcrypt), never in readable form.

Lock-out after wrong PINs

Repeated wrong PINs slow down and then pause further tries, which makes guessing impractical at the counter.

Audit trail

Price changes, refunds, stock adjustments, backups, restores and sign-ins are written to a log that records who did what and when.

Controlled-drug register

Sales of controlled medicines are recorded with batch, quantity, prescriber and patient details, and can be reviewed and completed later.

Encrypted link between counters

When you connect extra counters, the traffic between them is encrypted (AES-256-GCM) with a key you set up, protected against replay, and never passes through us.

Checked updates

New versions are announced with a digital signature and a checksum. The app refuses an installer that does not match.

Backups you can verify

Backups are checked for damage when made and again before a restore, and a safety copy of your current data is taken before anything is replaced. Only the owner can restore.

Locked-down window

The app runs in a sandboxed window that cannot open outside websites inside itself, and all text printed on receipts and letters is escaped.

What the app does not do yet

The database file and backup files are not encrypted. Anyone who can open your Windows account or copy a backup could read them. Use a Windows password, keep backups on a protected drive, and treat USB copies like cash.
PINs are 4 to 6 digits. That is convenient at a busy counter but is weak against someone who has a copy of the files. Do not reuse a PIN you use elsewhere.
The installer is not yet code-signed, so Windows may show a SmartScreen warning. Download only from this site.
No tax-authority (FBR) invoice integration is included yet.

What stays your job

Keep the Windows account passworded and the computer updated. Switch on disk encryption (BitLocker) where your Windows edition allows.
Give each person their own login and turn off accounts of people who leave.
Keep a recent backup on a second device, and keep that copy safe.
Only collect customer details you need, and follow the laws that apply to you.

Found a security problem? Please write to contactbinaziz@gmail.com before sharing it publicly. This page describes the current version and is updated when the app changes.