PHI protection isn’t a checkbox.

Sign in with Microsoft 365, Google, or Apple. The identity provider your customer already secures handles the credential and its second factor. Password sign-in is still available and requires MFA.

For password users, multi-factor authentication is enforced by restrictive row-level security policies on sensitive tables, not just by a redirect in the UI. A session without a verified second factor cannot read them.

There is no public sign-up. Every user is invited by a laboratory or organization administrator, and uninvited sign-in attempts through an identity provider are rejected.

TLS everywhere, with SSL enforced on connections to the database. AES-256 at rest for the database, file storage, and HL7 message blobs. Secrets held in a managed vault.

Every create, update, retraction, and deletion on patient, result, billing-rule, delegation, and pickup records is logged with who, when, and what changed. Insurance verification history is kept per patient.

Lab employees, organization administrators, clinical users, and billing users see only what their role and access groups allow. Billing users never see lab results. Hierarchy-based access for sales and collection management.

Once an order has been transmitted to your LIS it is locked from edits, so the record matches the message the laboratory received. Failed transmissions can be corrected and resent; a transmitted order is never sent twice.

Patient data is stored in US data centers. Support is handled by our US-based team during Pacific business hours. A Business Associate Agreement is provided as part of onboarding.

Point-in-time recovery plus encrypted off-site database dumps twice a day. Every backup run is restore-checked, and a full database restore has been measured in minutes, not hours.