Security
Evidence, not badges
HIPAA compliance is something your practice achieves with policies, training and the right tools. Here is what the software does to protect patient data, and what stays your practice's job.
-
09:02:14
Dr. Lee signed note · Maria A.
prev 4f1c…9a2e → c07d…11b8 -
09:04:51
S. Ortiz (front desk) viewed schedule · Main St
prev c07d…11b8 → 7e3a…d402 -
09:06:09
R. Patel, RN opened chart · Maria A.
prev 7e3a…d402 → a91f…5c07 -
09:07:30
Marketing user tried to open a chart
Blocked by role · logged
Change one entry and every link after it stops matching
Built-in safeguards
What is in the product today
Two-factor sign-in
Time-based one-time codes on every account, with trusted devices you can revoke.
Tamper-evident audit log
Each audit entry is chained to the one before it, so edits or deletions show up.
Role-based access
Provider, nurse, MA, front desk, billing, manager and marketing roles, each scoped to its job.
Session registry
See every active session and sign-in history, and end any session remotely.
BAA-gated sharing
Sharing patient data with a partner is blocked unless an active BAA is on file.
Marketing walls
Marketing users see campaigns and aggregate numbers, never a chart.
Small-cell suppression
Reports hide groups too small to stay anonymous.
Two-person approval
Patient campaigns need a second team member to approve before they send.
Shared responsibility
Who does what
Security in a practice is a split job. Here is the line we draw, so nobody assumes the other side has it covered.
EMR MD handles
- Sign-in security, two-factor codes and session control
- Role-based access rules and the audit trail
- Blocking patient-data sharing without a BAA on file
- Hiding small groups in reports
Your practice handles
- Your HIPAA policies, risk assessment and staff training
- Giving each person the right role, and removing leavers
- Securing the devices your team signs in from
- Reviewing the audit log on a schedule
Add-on modules
Available at extra charge
These modules sit on top of any plan. We quote them on your demo.
- Add-onePrescribing and EPCSElectronic prescriptions, including controlled substances
- Add-onInsurance claim submissionSend claims and track remittances without leaving EMR MD
- Add-onPatient portal appRecords, forms, messages and payments for patients in one place
- Add-onFHIR APIStandards-based data exchange for labs, partners and patient apps