Access from Vietnam only
CluvixHealth is built for clinics operating in Vietnam, and only accepts access from network addresses (IPs) located in Vietnam. Anyone who opens the software from a network address abroad is refused at the entrance and never even sees the sign-in screen. This protects the clinic's customer (patient) data, revenue and medical records from password guessing, vulnerability scans and attacks coming from other countries.
How it works
Every time someone opens CluvixHealth, the software checks which country that device's network address belongs to. The check happens at the entrance, before the request reaches the sign-in screen or any of the clinic's data.
| You connect from | Result |
|---|---|
| A network in Vietnam (clinic WiFi, 4G/5G, home internet) | You get in normally and sign in as usual. |
| A network address abroad | Refused. The page shows 403 Forbidden (access denied), with no sign-in screen to try passwords on. |
| A device that switches its address to another country (VPN, proxy) | Refused in the same way, because the software sees an address abroad. |
The software recognises the country from an international network address database (MaxMind GeoLite2) that is updated regularly, so the clinic never has to maintain a list of addresses. The rule covers all access to the clinic's system, both the website and the data connections behind it.
Why this makes the system safer
Bulk password attempts and automatic vulnerability scans often come from servers located abroad. With CluvixHealth, those requests are stopped outside the door:
- Attackers cannot try passwords, because they cannot open the sign-in page.
- Automatic scanning tools cannot find weaknesses, because they never reach the software.
- Patient data cannot be reached remotely from outside Vietnam, even by someone who knows the clinic's web address.
Data stored on servers in Vietnam
All of the clinic's data — customer (patient) records, medical records, orders, revenue — is stored on servers located in Vietnam. The data does not leave Vietnam, and the entrance only opens to network addresses in the country, so both the place where the data lives and the way in are inside Vietnam.
Protection layers that come with it
Blocking by country is the outermost layer. Inside it there are several more, each stopping a different kind of attack:
| Protection layer | What it does |
|---|---|
| Blocking by country | Only Vietnamese network addresses get in. |
| Sign-in attempt limit | One network address may only try to sign in a certain number of times per minute; rapid-fire attempts are temporarily blocked. |
| Automatic crawler blocking | Programs that scan pages automatically are refused on the website. |
| HTTPS encrypted connection | Data between your computer and the software is encrypted, so it cannot be read on the way. |
| Two-step verification, device limits, IP list | Protect each account, see Account Security. |
Country blocking runs by itself, the clinic has nothing to set up. To tighten things further, turn on two-step verification for every account and enter the clinic's IP list in Account Security: an outsider then needs not only to be in Vietnam but also to be on the clinic's own network.
Designed for Vietnamese clinics
Alongside limiting access to Vietnam, CluvixHealth works the way Vietnamese clinics operate: Vietnam time by default, electronic medical records as regulated, health insurance claims, the national e-prescription system, digital signatures and e-invoices. See Healthcare Connections for details.
Clinics or staff outside Vietnam
If you need to access the software from abroad, or your clinic is located outside Vietnam, please contact Cluvix Health directly. We can set up a dedicated server located abroad for clinics outside Vietnam, so the data stays close to where you operate and is protected in the same way.
Common errors
- You see a 403 Forbidden page when opening the software → the device is using a network address outside Vietnam, usually because a VPN or proxy is on → turn the VPN/proxy off, switch to a network in Vietnam, then reload the page.
- A staff member abroad cannot open the software → this is the protection working as intended; once they are back in Vietnam or on a Vietnamese network, the account works normally again. If they need to work from abroad regularly, contact Cluvix Health as described above.
Related
- Account Security — two-step verification, device limits, IP list and the security log.
- Two-Step Verification — the steps to turn 2FA on for an account.
- Healthcare Connections — connections required by Vietnamese healthcare rules.