Zero-Knowledge Encryption, Compliance Vault, Desktop Sync

How does DDSHARED encrypt dental files?

DDSHARED encrypts every file client-side using AES-256-GCM before upload. Each file receives a unique Media Encryption Key (MEK) wrapped with a Key Encryption Key (KEK) derived via HKDF-SHA256. The master key travels only in the URL fragment—never sent to the server.

This zero-knowledge architecture means DDSHARED servers never see plaintext PHI. Even if our servers were compromised, your files remain encrypted with keys only you control.

Learn more about security →

What HIPAA compliance features are included?

HIPAA compliance is built into DDSHARED by architecture, not as an add-on:

• Zero-knowledge encryption: PHI never exists in plaintext on servers
• Append-only audit logs: Immutable activity trail for every file access
• Role-based access control: Owner, Admin, Editor, Viewer roles with granular permissions
• Business Associate Agreement (BAA): Signed and managed digitally
• Automatic compliance reporting: Generate audit reports for OCR inspections

Learn more about HIPAA →

How does desktop sync work?

DDSHARED provides native desktop clients for macOS (Swift 6 with Finder integration) and Windows (Rust). Files appear as a cloud folder in your file system.

On macOS, DDSHARED integrates with Finder using NSFileProviderReplicatedExtension—the same technology iCloud Drive uses. On Windows, files sync automatically via native Explorer integration.

All encryption happens locally before upload. Your master key never leaves your device.

What practice management tools does DDSHARED include?

Beyond encrypted file sharing, DDSHARED includes Practice Booster features:

• Compliance Document Vault: Store OSHA, HIPAA policies, training records
• Policy Acknowledgment Hub: Track staff policy acknowledgments with e-signatures
• Digital Consent Forms: Patient consent forms with e-signature
• BAA Management: Track vendor BAAs with expiry alerts
• Sterilization Log: Digital sterilization log with equipment tracking
• Referral Packet Builder: Create and send encrypted referral packets
• Lab Case Tracker: Manage lab cases with status tracking
• Insurance Pre-Auth Tracker: Track pre-authorizations by patient

Does DDSHARED integrate with OpenDental?

Yes! DDSHARED integrates with OpenDental through our Xync bridge (Professional and Enterprise plans). Xync automatically syncs patient files between OpenDental and DDSHARED while maintaining zero-knowledge encryption.

Files are encrypted locally before upload to DDSHARED. When you open a file from OpenDental, Xync decrypts it on your device—the server never sees plaintext PHI.

Can I add unlimited users to my practice?

Yes! All DDSHARED plans include unlimited users. Whether you have 2 staff members or 200, you can add everyone without additional per-user fees.

Each user gets their own login, role-based permissions, and activity appears in the audit log. You can revoke access instantly if someone leaves your practice.

How fast is DDSHARED file upload?

DDSHARED uses Cloudflare R2 for encrypted blob storage with presigned uploads. Files upload directly from your browser to Cloudflare's global network—faster than traditional cloud storage.

Our HyperFast Upload feature (experimental) streams large files (X-rays, 3D scans) in chunks for even faster uploads and resume capability if your connection drops.

How does role-based access control work?

DDSHARED supports four role levels:

• Owner: Full access + billing, practice settings, user management
• Admin: Manage users, folders, permissions (no billing access)
• Editor: Upload, edit, delete files they own or have Editor rights to
• Viewer: Read-only access to files they're granted access to

Permissions can be set at the practice level, location level, or per-folder. Every permission change is logged in the immutable audit trail.