No live patient records
This public website is separate from the live Calendo Health app. Product visuals and video preview assets use privacy-safe marketing assets only.
Security
Security and trust for the public website.
Calendo Health is presented here as a public CareGrid marketing site. The website is built to support clinic evaluation without connecting to the live product or exposing patient information.
Minimal browser storage
The site stores privacy preferences, checklist progress, attribution context, and non-sensitive demo or updates receipts locally.
Validated demo requests
Demo submissions are validated, rate-limited, size-limited, protected by a honeypot field, and guide visitors to a clear contact path if online sending is unavailable.
Hardened public delivery
Security headers include a same-origin content policy, HSTS, frame blocking, MIME sniffing protection, referrer controls, and restricted browser permissions.
Disclosure
A clear path for security reports.
If you find a vulnerability or public website issue, use the published disclosure contact instead of submitting sensitive details through the demo form.
Responsible disclosure
Security contact metadata is published at /.well-known/security.txt. Reports can also be sent to hello@organosi.com.gr.
Scope note
This page and the security inventory describe the public marketing website. They are not a compliance certification, data processing agreement, or statement about a live clinic deployment.
Clinic-ready habits
Keep public material clean.
The marketing site is designed to help teams evaluate Calendo Health while keeping sensitive clinic details out of public forms, screenshots, and launch copy.
- Do not submit patient data through the demo form.
- Use privacy-safe screenshots and recordings for public materials.
- Review privacy preferences before enabling analytics.
- Use the security contact for vulnerability reports or public-site concerns.