# MedPhoto

> MedPhoto is a secure, compliance-grade platform for doctors and clinics to store, organize, and share patient photos, videos, and documents. Files are encrypted on the user's device (AES-256-GCM) before upload, so MedPhoto itself never sees decrypted patient media. Built for Brazilian medical practice and certified against LGPD, HIPAA, and GDPR.

MedPhoto is a Brazilian software-as-a-service product (medphoto.com.br) primarily used by dermatologists, plastic surgeons, dentists, and clinical teams who need a defensible alternative to storing patient photos in WhatsApp, the phone's camera roll, or generic cloud drives.

Last updated: 2026-09-02

## What MedPhoto does

- End-to-end encrypted storage of patient photos, videos, DICOM, and clinical documents
- Patient records with consent templates (LGPD, GDPR, HIPAA artifacts)
- Before/after comparison views for clinical follow-up
- Shareable links for second opinions, served from a separate `share.medphoto.com.br` subdomain with revocable access
- Multi-workspace model: every doctor has a personal organization; clinics are shared workspaces with billing and member management
- Immutable audit trail and granular access controls

## Compliance and security

- AES-256-GCM client-side encryption before upload
- Region-pinned storage (Brazil for LGPD, EU for GDPR, US for HIPAA)
- SOC 2 Type II infrastructure
- Audit trail for every read, write, and share action
- No patient data in analytics or error monitoring

## Key pages

- [Home](https://medphoto.com.br/): product overview and value proposition
- [Sobre](https://medphoto.com.br/about): about the company, founding team, and mission
- [Conformidade](https://medphoto.com.br/compliance): how MedPhoto satisfies LGPD, GDPR, and HIPAA
- [Privacidade](https://medphoto.com.br/privacy): privacy policy and data subject rights
- [Termos](https://medphoto.com.br/terms): terms of use
- [DPA](https://medphoto.com.br/dpa): data processing agreement
- [Security](https://medphoto.com.br/security): vulnerability disclosure policy
- [Security advisories](https://medphoto.com.br/security/advisories): published advisories
- [Contato](https://medphoto.com.br/contact): support, sales, and DPO contact
- [Get the app](https://medphoto.com.br/get-app): iOS and Android download
- [Pricing data](https://medphoto.com.br/pricing.md): machine-readable pricing for agent use

## Plans (BRL)

- Starter: R$29,90/mo or R$299,00/yr · up to 1,000 files or 1 GB · photos and videos only
- Pro: R$69,90/mo or R$699,00/yr · up to 10,000 files or 10 GB · photos, videos, documents, TIFF, DICOM · before/after comparison · full audit trail · priority support
- Max: R$139,90/mo or R$1.399,00/yr · up to 100,000 files or 100 GB · everything in Pro · integration API · 24h priority support
- Clínica: R$749,90/mo or R$7.499,00/yr · up to 1,000,000 files or 1 TB · unlimited patients · multi-user · integration API · dedicated account manager · 99.9% SLA

Annual billing charges 10 months instead of 12 — two months free, ~17% off. See [pricing.md](https://medphoto.com.br/pricing.md) for the structured breakdown.

## Languages

Content is published in Brazilian Portuguese (pt-BR). The product is primarily marketed to clinics and doctors in Brazil; compliance posture also covers EU (GDPR) and US (HIPAA) clinics.

## Contact

- Support: suporte@medphoto.com.br
- Sales: vendas@medphoto.com.br
- Data Protection Officer (DPO): dpo@medphoto.com.br
- Security disclosures: security@medphoto.com.br