• System has a secure portal for escrowed client communication.

• Patient portal/ secure messages are branded to EHR system.

Remember you need perform a collaborative risk analysis with the clients to make sure any email or message is safe to arrive in their inbox.  Please see course (HIPAA XX at XX) on how to perform and document the collaborative risk analysis. 

• Client communication must by selected via an option or setting to initiate.

• Text messaging can be restricted based on the individual.

• Text messages and notifications must manually be turned on.

• SMS Text messages are used by this system. Please discuss risk with client prior to using or sending any texts.

Need to review how to make SMS texts use appropriate for use in the clinic?   Please see course (HIPAA XX at XX).

• Clinical notes can have restrictions to access based on assigned role type.

Group Tip: Remember that PHI access is not just given. Please review (HIPAA xx) to review granting PHI access. 

• Clinical notes have access restrictions down to the individual user. It silos the notes of the individual clinician to remove the risk of clinicians accessing other clinicians records.

Group Tip: Remember that the business structure of the group changes requirements for your EHR system and needs to be holistically reviewed in your Risk Analysis. Please review (HIPAA xx). 

• Clinical notes lock. Must use addendum to update or change information.

• Client accounts can not be deleted if they meet certain requirements.

• Clinical notes can not be deleted.

• Uploaded documents can be designated as clinical which restricts access for certain role designations.

• For performing release of records, certain templates allow for optional sharing of a portion of the note that holds sensitive info. (Think “psychotherapy” notes).

• System provides a secure method of invoicing either directly in patient portal or password protected email.

• System provides a secure receipt or an option to restrict sending to an individual.

• Appointment reminder types can be set to each individual.

• Video conferencing platform’s patient portal acts as a waiting room and will invite to conversation.

• Video conferencing platform provides no screen sharing.

As a reminder, compliance is never a product— it is a process. There are no major complications to using this product when you integrate this into your risk compliance program.  Just starting your security program? Please review (HIPAA XX) for guidance on creating and executing your compliance program.

• Be aware that while we do our best to be thorough and complete, information may be missing or possibly even inaccurate. Products also change quickly, and the review may become out of date. This review was performed on 4/2019.  If there is outdated information please contact us here.
• Members have the right to submit reviews. Contact us here to have us review please submit your request here.