Your records stay
in your building.

Who can see what

Every staff member signs in with their own account, and their role decides what they can see and do. Accounts lock after repeated wrong passwords, people are signed out after a period without activity, and every chart view, change, print and sign-in is recorded in an audit log.

Signing in

Passwords must be at least 10 characters and common passwords are refused. Two-step sign-in with a code from a phone is available, and is required for anyone signing in from outside the building. On the facility Mac, staff can sign in with Touch ID.

Backups

The records are backed up every night, encrypted, and checked after each backup. The facility keeps the recovery key; without it, nobody can open a backup.

What leaves the building

By default, only public reference lookups: drug names and codes to the National Library of Medicine and the FDA, and provider searches to the CMS NPI Registry. Each request is checked so that no resident’s name, date of birth, record number or phone number is sent. An administrator can turn the lookups off. Optional AI features are off until the facility turns them on, and the ones that send patient information require a HIPAA business associate agreement first.

What we do not claim

HIPAA compliance depends on the software together with how a facility sets it up and runs it, its agreements and its policies. We do not claim that Emanage Care is “HIPAA certified” (there is no such certification) or ONC certified.

Questions: privacy@emanagecare.com. To report a security concern, write to the same address. Please do not include patient information.