Security & Trust

Ownership, integrity, accountability.

The Veterinary Surgical Documentation System is offline-first and clinic-owned. The system is designed under the assumption of adversarial review. These are architectural commitments, not marketing claims.

Clinician-controlled release

Review. Approve.
Then share.

DraftApprovalExport
Private Wi-FiUSB export
Workflow overview

Data Ownership

Clinics own the data outright. There is no cloud, no silent uploads, and no third-party possession.

Offline-First Design

Vetucate runs without internet access. The appliance does not join the clinic network or internet. Only an explicitly started sharing session raises a local private network for one approved case.

Evidence Integrity

Every thirty-second interval is fingerprinted and chained to its predecessor. The manifest records interval fingerprints and blur completion. Accepted facts retain their evidence and software version in an append-only ledger.

Auditability

Anyone holding the export can check its evidence blocks and manifest against their fingerprints. Repeated processing is described for the same recording and software; entries identify the software that wrote them.

Non-negotiable operating terms

No cloud

No tracking

No remote access

Approval before export

Vetucate has no ongoing access to clinic data after deployment.

No cloud · No tracking · No remote access · Export requires surgeon approval

Compliance Workflow

Approval before export.

No case can be exported without explicit surgeon sign-off. The approval gate is enforced at the system level. It cannot be bypassed remotely, by Vetucate, or by the clinic. The application enforces approval before either transfer route is available.

USB Export

Physical transfer. No network required.

Approved export packages are transferred to USB media. The system mounts the drive, copies the sealed package, and safely ejects it. No background sync. No network connection. Operators watch transfer progress directly.

Share by Wi-Fi

The device creates a private network for one approved case. It does not join the clinic network or internet. Sharing ends when the surgeon stops it or after thirty minutes.

Sharing step by step