Where your data lives, and who can see it.
Hosting regions are named in your agreement. Every role has limits, and every access is recorded.
| Role | Stock | Sales | Members | Export |
|---|---|---|---|---|
| Outlet pharmacist | Edit | Edit | Edit | — |
| Warehouse controller | Edit | View | — | — |
| Head-office marketing | View | View | View | Blocked |
| IT administrator | View | View | View | Export |
Where data lives
Security and PDPA
- 01
- 02
- 03
Your data stays where your agreement says.
- Production and backup regions are named in your agreement.
- Any service that handles data outside Malaysia is named, with its region.
- You can export your records at any time.
- Production regionNamed in your agreement Region required
- Backup regionNamed in your agreement Region required
- Services outside MalaysiaNamed, with the region Listed
- ExportYour records, at any time Available
Who can see what
Security and PDPA
- 01
- 02
- 03
Every role has limits. Every access is recorded.
Access is set by site and by job.
-
Roles by site and job
Staff see only their sites and tasks.
-
Approvals
Sensitive changes need a second person.
-
Audit trail
Every view and change is recorded.
-
Export
Your IT team can export the log.
- HM U-0142 · Outlet pharmacistMember M-20931 · Viewed Allowed
- HM U-0217 · Head-office marketingMember M-20931 · Exported Blocked
- RN U-0142 · Outlet pharmacistMember M-18840 · Corrected Allowed
PDPA and retention
Security and PDPA
- 01
- 02
- 03
Your PDPA duties, in plain words.
You are the data controller. Pharmatica processes data on your instructions.
Who is responsible for personal data?
You are the data controller. Pharmatica is your data processor and acts only on your instructions.
How long is each record kept?
The retention period for each record class is set in your agreement.
How are records deleted, and who approves it?
Deletion runs as a workflow with a named approver, and the disposal is recorded.
Does the Cyber Security Act 2024 apply to us?
It applies only if you are a designated critical infrastructure entity.
Which other services handle our data?
Every service that handles your data is named, with its region.
Book a strategy session for your operation.
A strategy session takes 90 minutes. It ends with a written scope for a pilot.