Your expedition's records — backed up automatically, in step across your whole team, and on your desk when you get home. End-to-end encrypted, so no one but your team can ever read them. Not even us.
One subscription, one job: your records, protected and wherever you need them — in the field, across your team, and back at base.
Beacon is end-to-end encrypted. Patient data is scrambled on your phone before it leaves, and only your team holds the key. The cloud — and FieldMedic — only ever see unreadable ciphertext.
Your records are encrypted with AES-256 on the phone itself. Nothing readable ever crosses the network.
The encryption code lives in your team's join QR and recovery code. It is never sent to any server — so nobody without it, including us, can ever decrypt your data.
The cloud holds unreadable blobs plus routing labels — no names, no clinical content. A breach of the server would expose nothing readable.
Approved devices — and your browser in the Records Portal — decrypt locally with the team key. Access needs a member's approval and is logged for everyone to see.
AES-256 (AES-GCM) using the device's built-in cryptography (WebCrypto). The team key is derived with PBKDF2 (SHA-256, 150,000 iterations) and never leaves your devices. Everything travels over TLS, and at rest the encrypted blobs sit in a UK/London region with AES-256 encryption at rest, keys held in FIPS 140-2 hardware security modules, and daily encrypted backups. Because the decryption key exists only on your team's devices, the store holds nothing anyone else can read.
The honest trade-off: if your whole team loses the recovery code, the cloud copy is unrecoverable — by design. Your on-device records are unaffected.
Subscribe in the app for a single trip or the whole season — or go annual and stop thinking about it.
Subscribe inside the app: Settings → Cloud Sync & Backup. Requires the one-time FieldMedic Pro unlock. Recovering your own data is never paywalled — if a subscription lapses, syncing pauses but every record stays on your device.
Prices shown for the UK; local pricing applies in other countries. Managed through your App Store account.
Two companion tools on the web — one for your participants before the trip, one for you after it.
Your group members fill in their medical pre-screening online — allergies, conditions, medications, emergency contacts — and hand it to you as a QR code or file. Nothing is stored on our servers; the page runs entirely in their browser. Importing into the app (QR scan or bulk CSV) is part of Beacon.
Open the pre-screening form →Open your team's records on a computer with your recovery code. Review the whole trip on a big screen, export everything to a spreadsheet, or print handover documents. Read-only — and decrypted only in your browser, never on the server.
Open the Records Portal →The short version of how Beacon handles data. The full detail lives in our Privacy Policy.
By default FieldMedic transmits nothing — everything stays on your device. Cloud features only activate when you turn on backup or create/join a team, and you can turn them off at any time (your local records are untouched).
Encrypted, unreadable snapshots of your records, plus non-identifying routing labels (a team ID and a device ID) and access-log entries (the name and role each person gives when opening records). No readable patient data — ever.
Storage is hosted in the UK/EU on managed infrastructure (Supabase). Because it holds only ciphertext, neither FieldMedic nor the host can read it. FieldMedic is registering with the UK Information Commissioner's Office (ICO). You remain the data controller for your patient data; when you enable Beacon, FieldMedic acts as a processor on your behalf under a signed Data Processing Agreement, available on request.
Share the join QR and recovery code only with people authorised to see the team's records — anyone holding them can decrypt the data. Keep your recovery code safe: for your privacy, we cannot recover it. And ensure you have the appropriate basis under UK GDPR (or your local law) to record and share patient information.
"Leave team" or "Turn off backup" stops syncing instantly and removes nothing from your device. To have a team's encrypted cloud data deleted, contact hello@fieldmedic.app.
Completely. FieldMedic is offline-first — Beacon syncs opportunistically whenever you have a connection and quietly waits when you don't. On a two-week trip with no signal, everything syncs when you're back in coverage. Nearby-device sync (iOS) still works with no internet at all.
Your last backup is safe in the cloud. On a replacement phone, paste your recovery code (or rejoin the team) and everything comes back. This is exactly what Beacon is for.
Only devices holding your team's encryption code — which travels in the join QR and never touches our servers. FieldMedic can't read it. Supabase can't read it. A hacker with the entire database couldn't read it.
If any of your team's devices still has the app, you can re-show the code from there. If every device and the code are gone, the encrypted cloud copy cannot be recovered — that's the price of encryption nobody can bypass, including us. Your on-device data and local backup file are unaffected.
No — recovering your own data is never paywalled. If a subscription ends, cloud syncing simply pauses; every record stays on your device and you can still restore your data. The subscription pays for the ongoing connection, not for access to your own records.
Unlike the app, the cloud features carry ongoing running costs — secure hosting, backups, and maintaining the encryption infrastructure. A small recurring fee is what keeps them sustainable and properly maintained. Nothing you already bought with Pro moves behind it.
Yes — that's what monthly is for. Subscribe before the trip, cancel after; your local records keep working forever, and the cloud copy simply stops updating.
Each medic subscribes individually in the app. Anyone in the team with Beacon can back up, sync, and use the portal.
Beacon lives inside FieldMedic — download the app, unlock Pro, and turn on Beacon in Settings → Cloud Sync & Backup.
Download FieldMedic