Trust and compliance

Built for regulated trade

Pharmaceutical trade depends on verified businesses, accurate records and strict data separation. Here's how MedSpora handles each.

What we do

Verify businesses before they can trade (licence and registration documents are reviewed by MedSpora).
Store sensitive documents encrypted and show them only to authorised reviewers.
Keep an unchangeable record of what was agreed for every order: price, scheme, tax and commission.
Keep an audit trail of sensitive actions such as price changes, approvals and refunds.
Keep each distributor's data separate, with access checks on our servers and not only in the app.
Block expired batches from ever being allocated to an order.

We are not a pharmacy and don't sell medicines to patients.
We don't diagnose, prescribe or recommend medicines or dosages.
A shared composition doesn't mean two products are clinically interchangeable, and we never suggest that it does.
We don't sell your data or show advertising.

Passwords are stored as one-way hashes. Sign-in attempts are rate-limited, and one-time email codes expire within minutes.

See every signed-in device and sign out of all of them. A password reset signs out every other device.

HTTPS everywhere, and business documents are encrypted at rest.