Security on one page

For care managers and data protection officers: what Inventory does with data – and where its limits are.

As of 1 November 2026 · test phase

Where the data lives

On the iPad or iPhone of the care service or facility. There is no server, no cloud sync, no tracking and no analytics.
Data is stored encrypted per group, plus iOS file protection. That only works with a device passcode; without one, the app warns you.

Clients appear under a client number.
Name and date of birth are used only for prescription requests. They are kept in the device’s Keychain, not synced, not in backups, and only an Admin can edit them.
Every stock entry records who made it.

Prescription requests: Inventory prepares the email, you check it and send it through Microsoft Outlook. Inventory neither sends nor stores this email.
BfArM notices: the public list is downloaded; no client data is sent.
Client report for access requests: only by an Admin, as an encrypted PDF. The app shows the password once.
As the provider, I receive nothing from the app. During the test phase, Apple passes me your name, email address, device type and system version, crash reports and your feedback through TestFlight.

Roles (Admin, Superuser, User) and access only to your own groups.
Automatic lock when idle and protection against screenshots.
Passwords are not stored in plain text. Personal recovery codes help with forgotten passwords.

Moving to a new device with a moving code on the local network; the old device then wipes itself.
Encrypted backups on the device.
Retention is 10 years by default, adjustable by an Admin (1 to 30 years). Deleted data can remain in older backups until they are replaced.

Inventory is a pre-release version. There has been no independent security test and no certification yet.
Encryption separates groups, not individual staff. An Admin can see and change their groups’ data.
A stock belongs to one device. Several devices sharing the same stock are not possible yet.
Your Outlook is responsible for sending the prescription request: transport encryption and the agreement with Microsoft are set up in your Microsoft 365 account.
Inventory is a planning aid. It does not replace care documentation, care software or a doctor’s prescription.

Set a device passcode, manage devices centrally if possible (MDM) and make regular backups.
Before using real client data: a record of processing activities and a data protection impact assessment with your data protection officer. Made-up client numbers are enough for the test phase.

Questions are welcome: [email protected]. The full privacy notice still applies.