Full HIPAA compliance; BAAs with all data subprocessors

PHI encrypted at rest (AES-256) and in transit (TLS 1.2+)

Tamper-proof audit trail of record access and edits (Role-Based Access: Tech vs Assistant vs Clinician)

Query and import patient medication history via a designated QHIN

Deduplicate and normalize medication list, ensuring data provenance

Contribute updated medication list back to the QHIN after encounters within 72 hours

Structured patient demographics sufficient for cross-system patient matching

Active and historical medication list management, independent of PMS

Tamper-proof audit trail of record access and edits (Role-Based Access: Tech vs Assistant vs Clinician)

Ability to verify or record a patient's eligibility status (Medicare + Medicaid) — via direct payer query or manual entry — prior to or at time of encounter

Ability to store a copy of the patient’s Medicare + Medicaid card (front + back)

Exportable report of completed consults including: service type, duration, method, rendering clinician, and patient identifier