Your data, your exit
Leave any time. Take everything with you.
Your hospital’s records are yours. From Settings, an administrator can export all of them as one locked ZIP of readable spreadsheets and your patients’ documents. There is no form to fill, no ticket to raise and no reply to wait for from us.
- No permission needed
- Readable spreadsheets
- Password-locked
- Deleted after download
This page describes the export as it works today. The binding wording is in our Terms and Conditions (Clause 17A) and Privacy Policy (Section 19A), which control if they differ. Read the Terms.
Why this matters
Software you can walk away from is software you can trust
A hospital should never feel stuck. If you ever decide to move to another system, close a branch, or simply want your own copy, you should not have to ask anyone’s permission or wait for anyone’s reply.
So the export is a button in Settings that you press yourself. It is built for the person who owns the hospital, not hidden behind a support request.
How it works
Five steps, all in your hands
You start it and you download it. We never have to be asked.
Open Settings → Export hospital data
Only a hospital administrator can see it. Nobody at Amma Health can start an export on your behalf.
Confirm it is really you
Your password, the code from your authenticator app, and a 6-digit code we email to you. Two-step verification is required for exports.
A 24-hour safety wait
Nothing is built yet. Everyone in your hospital is alerted straight away and any administrator can cancel. If nobody does, it starts by itself. This wait is what stops a stranger who has stolen a login from walking out with everything.
We build it, you watch
A live progress screen shows what is being collected. You can leave the page, and we email you when it is ready.
Download once, open with 7-Zip
The password for the ZIP arrives in a separate email and is never shown on screen. The file is deleted from our server the moment your download completes.
What you get
Everything the software holds, in files you can read
What is inside
- Patients, with their private notes decrypted and readable
- Appointments, visits and consultation notes
- Prescriptions and follow-ups
- Bills, bill lines, payments and a monthly GST summary
- Staff, roles, branches and doctor hours
- Hospital settings, receipt layout and price list
- The activity log, sign-in history and Terms acceptances
- Every patient document and prescription file from your own storage, one folder per patient
- A README and a data dictionary that explain every column
What is never included
- Passwords, PINs, two-factor secrets and sign-in tokens
- Your document-storage access keys
- Anything that belongs to another hospital or to the Amma Health service as a whole
Built so only you can use it
The same button is the most valuable thing in the product, so it is locked down
An export holds every patient record. We assume someone will eventually try to misuse a stolen login, and we built the button so that one stolen password is not enough.
Three proofs, not one
Password, authenticator code and an emailed code. All three, every time.
Paused after any account change
For 72 hours after a password, email, phone or authenticator change, or from a device we have not seen before, the button stays locked.
24 hours to say “not me”
Every administrator, every staff member and our own team are alerted the moment an export is asked for, and can cancel it until it starts.
Cancelled by itself if things change
If the requester’s password, email, phone or authenticator changes while the export waits, it is cancelled instead of started.
A download link for one computer
The link works once, for one minute, and only from the browser and network that asked for it.
An off switch
We can switch exports off for every hospital, or for one, within seconds if we ever suspect a problem.
What happens to the file
It exists for as short a time as we can make it
The file is deleted from our server as soon as your download completes. If nobody downloads it, it is deleted automatically 6 hours after it is ready. Once it is gone it cannot be recovered, and you would start a new export.
The ZIP is locked with a long random password (AES-256). We email that password to you, never show it on screen, and cannot open the file ourselves or recover the password later. The file is not part of our backups.
Your patients’ documents normally stay in your own cloud storage, where we keep no copy. The export is the one time a copy is made on our server, and only because you asked for it.
Honest limits
What to know before you rely on it
- It is not instant. Allow at least a day: the safety wait comes first, and building it takes longer for a large hospital with many documents.
- One export a day and three in any 30 days, and one at a time. A failed or cancelled export does not count.
- It is a snapshot, not a backup. Check the file when you receive it: anything that could not be fetched, such as a document your storage no longer holds, is listed rather than silently dropped.
- Once you have downloaded it, the file is yours and your responsibility: where it is kept, who can open it, and the law that applies to it.
- If your account is suspended, or you cannot use the page, write to us and we will help under our Terms.
Questions
What hospitals ask us about exporting
Read the exact words
Everything above is also in our Terms and Privacy Policy, in the clauses on the Self-Service Export, including who is responsible for what. We would rather you read them than take our word for it.