Trust you can check, line by line.
Medical records in Indonesia must be complete, attributable and kept for 25 years. Here is how JONAH is built for that, and an honest status for every item: verified, in progress, or planned.
Named users only
Every staff member signs in with their own account. Sessions are held on the server and expire after 12 hours; passwords are stored with a slow, salted hash.
A complete audit trail
Sign-ins, sign-outs, edits, signatures, AI inserts, pharmacy overrides and exports are logged against the person who did them.
Signed means signed
Signing closes the visit. A later correction keeps the original note and signature as a hidden version, and records who changed what and when.
Nothing silently deleted
Retracted diagnoses stay in history. Records are designed for the 25-year retention that Permenkes 24/2022 requires.
Audio never stored
Consultation audio is turned into text and discarded. The raw transcript is purged after 24 hours.
AI sees de-identified text
Names, NIK, addresses and phone numbers are replaced before any text reaches the AI. AI features are opt-in per clinic.
Least access by role
Six roles; each sees only its own screens. Deep links to a page a role may not use go back to that person's home.
Your data leaves with you
An admin can export the whole clinic record in one file, at any time, at no charge.
Reporting that recovers
SATUSEHAT sends are queued and retried; nothing is lost when the national platform is slow.
Compliance status
Updated as items change. If it says In preparation, it is not done yet.
| Item | Status | What that means today |
|---|---|---|
| Permenkes 24/2022 medical-record design | Built | Attributable entries, signed and versioned notes, no hard deletes, full export. Formal legal review of each article is in progress. |
| SATUSEHAT (FHIR R4) | Sandbox-tested | A complete outpatient visit accepted end to end by the Kemenkes sandbox. Live connection follows each clinic's registration approval. |
| Indonesian hosting | In preparation | Production infrastructure in an Indonesian cloud region is designed and ready to apply before general release. |
| PSE registration (Komdigi) | In preparation | Required for an electronic system operator serving Indonesian users; to be completed through our Indonesian entity. |
| UU 27/2022 personal data protection | In progress | De-identification, minimisation (no audio), named access and export are built; breach-notification procedures are being formalised. |
| AI data processing location | Under legal review | Only de-identified text is sent to the AI model. Where that processing may occur is being confirmed with counsel before general release. |
| Two-factor sign-in | Planned | On the roadmap. |
| ISO 27001 | Planned | Not certified. We will not show a badge until we are. |
When AI is down, the clinic is not.
The EMR never waits on an AI service. Saving, signing, dispensing and SATUSEHAT reporting carry on; the AI panel simply says it is unavailable. AI services store no patient records.