Security and data handling
Plain answers. If your security review needs something that isn't covered here, email sales@howardmedical.com so our team can review it with you.
Account details (name, work email, organization) and the purchasing data your facility shares with us. That means SKUs, descriptions, quantities, prices, and your order history on the platform. Purchase-history files are business purchasing records.
Do not include patient information in files, messages or requests. SurgNet is intended for business purchasing information. If you accidentally send sensitive information, contact sales to arrange a review.
SurgNet uses Vercel for the website and Supabase for its database and password sign-in. Email services support account recovery and request communications. Contact sales if your review requires details about providers, data location or processing arrangements before you share files.
Buyer access is associated with a customer organization. Howard Medical administrators can review customer records to operate the service and support purchase requests.
Contact sales to review what information would be shared with service providers or suppliers for sourcing, delivery and other order arrangements before you proceed.
The application checks the signed-in account against its user record to determine customer and administrator access. Buyer context is taken from the customer organization assigned to that account. Administrator access requires an administrator role in the application.
Password sign-in with email-based reset, handled by Supabase. There's no public self-signup flow. Contact sales to arrange access. An account alone does not establish that a particular product or purchase is appropriate for your facility.
If your facility requires a certification, agreement or specific security control, contact sales to review that requirement before sharing data. This page is an overview of the service, not a security certification or a substitute for your facility's review.
Email sales@howardmedical.com to request access, correction or deletion of your organization's data. The team will review the request and discuss its scope, any records that need to be retained, and the next steps with you.
Review privacy questions and proposed terms with sales before sharing files or approving an order. Contact sales.