Data Security

Molecule CloudRx acts as a trusted confidential application service provider dedicated to providing a secure Internet and mobile prescribing service.

Molecule CloudRx employs a high degree of security consciousness. One of Molecule CloudRx’s priorities is to make reasonable efforts to keep data secure and to comply with applicable law. Access, integrity, availability, ownership, authorisation, dependability, authentication, and confidentiality are all major considerations within our Data Security policy. Unfortunately, the Internet cannot be guaranteed to be 100% secure, and we cannot ensure or warrant the security of any information you provide to us.

Molecule CloudRx upholds stringent data security with the following security measures:

Role-Based Usage

Molecule CloudRx grants varying degrees of access to users with different levels of authority within a provider practice.

Encryption

All connections use HTTPS with TLS 1.2 or higher.

Data Security

Molecule CloudRx takes reasonable measures to secure your data on our servers, in Microsoft Azure data centres in the UK, in line with UK GDPR. The data centres are both physically and electronically secured. Our servers are isolated from the Internet by using a firewall which is a hardware and software system that blocks access by unauthorised parties. We use software to filter out malicious requests, block bots, and protect against Distributed Denial of Service attacks.

Login ID and Password

Access to your account is controlled by a login ID and a password which you choose along with two-factor authentication. Strict login ID and password rules are enforced to help prevent unauthorised users from gaining access to data. We do NOT store a plain text version of your password. Your password is stored using a salted one-way password hash, which means no one at Molecule CloudRx knows what password you have chosen and it is not possible to decrypt. If you ever forget your password, you can choose a new one using an email verification check.

Auto Log Out

Molecule CloudRx protects you against accidentally leaving your account active on a computer browser screen. The Molecule CloudRx server ends your “session” if you are logged into Molecule CloudRx but have not actively used the service for a set period of time. This prevents others from accessing your account when you leave a session and forget to log out.

Digital Certificates

Molecule CloudRx uses a digital certificate issued by a secure server certification authority. This gives you the confidence that you are connected to a site or application operated by Molecule CloudRx and authenticated as such.

Data Integrity

Molecule CloudRx is hosted on enterprise-class infrastructure with a tier-one cloud provider. Microsoft Azure’s data centres are ISO 27001 and PCI DSS compliant, to help ensure data is secure and available. Molecule CloudRx holds Cyber Essentials Plus certification.

What can I do to protect my privacy?

In order to protect your privacy while using Molecule CloudRx, you can:

• Never share your login ID or password.
• Always sign out when you are finished using the service.
• Use a long passphrase, such as three random words, as recommended by the National Cyber Security Centre (NCSC).
• Keep two-factor authentication switched on.
• Install and maintain anti-virus software and a firewall on all computers that you use to access the Molecule CloudRx service.
• Promptly install all security and software updates for your iPad/iPhone apps, your web browser, and computer operating systems.
• Ensure all steps are taken to keep your devices secured. Do not leave your device unattended whilst logged on.
• Report any suspected compromise of your account to pharmacy@cloudrx.co.uk.