ICP-Brasil digital certificate: what it is in the clinic
Quick facts
- Definition
- Electronic identity issued by an ICP-Brasil certificate authority, used to sign documents digitally.
- Common types
- A1 (file, usually valid for one year) and A3 (token or card, with longer validity).
- Use in the clinic
- Signing electronic patient records, prescriptions, reports and consent forms, according to the council's rules.
- Attention
- It is personal and non-transferable; the password and the token are not shared.
The ICP-Brasil digital certificate is the electronic identity issued by a certificate authority accredited by the Brazilian Public Key Infrastructure. It allows documents to be signed digitally, with verifiable authorship and integrity: if the file is altered after signing, the signature is no longer valid.
What are the most commonly used types?
| Type | How it is stored | Usual validity |
|---|---|---|
| A1 | File installed on the computer or in the cloud | Usually one year |
| A3 | Token or card with its own password | From one to a few years, depending on the product |
The choice depends on the routine. The A3 is safer against copying, while the A1 is more practical for those who sign on several devices.
Where does it fit in the clinic routine?
The most common use is in the electronic patient record, which needs authenticity and retention for a period set by regulation. It is also required, depending on the case, for digital prescriptions and reports. For the informed consent form, the signature can be handwritten, simple electronic or certificate-based, depending on what the professional council and the clinic's legal advisor recommend.
What does the LGPD have to do with it?
The certificate protects authorship, but it does not replace care with personal data. Patient records and facial photos involve sensitive data, handled according to the LGPD (Brazil's General Data Protection Law) and professional secrecy. Whoever signs digitally is still required to store the files with restricted access and a secure backup.
In Harmy
Harmy does not sign documents or manage patient records. The app generates projections and quotes in PDF, and signing the consent form and the patient record stays in the systems the clinic already uses.
Frequently asked questions
What is an ICP-Brasil digital certificate?
It is an electronic document that identifies who signs a file, issued by a certificate authority accredited by ICP-Brasil (the Brazilian public key infrastructure). The signature has legal validity.
Does every informed consent form need a digital certificate?
Not always. It depends on the type of document and on the rules of your professional council. For electronic patient records and prescriptions, the requirement is more common.