Your mental health data, protected at every layer
From encrypted cloud infrastructure to role-based access control, MyDiri is designed so you can trust us with the most personal information there is — your mental health journey.
How we keep your data safe
The foundational pillars of the MyDiri security architecture.
Encrypted at Rest & in Transit
Every connection between your device and MyDiri is protected with industry-standard TLS encryption — the same standard used by online banking. Your screening responses and assessment data are encrypted at rest in our database.
Cloud Infrastructure
MyDiri is hosted on Amazon Web Services (AWS) infrastructure in Singapore, with automated backups so your data stays protected even in the event of a system failure.
Role-Based Access Control
Access to personal and clinical data is restricted by role — support staff, clinicians, and platform administrators can only see the data they are authorised to act on.
Audit Trail
Access to sensitive records and changes to account, billing, and clinical configuration are logged with actor identity and timestamps, so any incident can be traced.
PDPA-Aligned Data Practices
MyDiri's data handling is aligned with Malaysia's Personal Data Protection Act (PDPA) 2010. Sensitive mental health data is processed only with your explicit consent, and you retain the right to access, correct, or request deletion of your data. See our Privacy Policy for details.
No Raw Scores Exposed
Screening and assessment results are always presented as a severity band with plain-language guidance — never as a raw clinical score — reducing the risk of misinterpretation if a screen is ever seen by someone else.
Security is a partnership
We secure the platform; you help by keeping your account safe — don't share your login credentials, and contact us immediately if you suspect unauthorised access to your account.
Security inquiries or vulnerability reports
support@mydiri.com
