OAuth2 client-credentials. Read-only by default. No chart exports. No new portal for your clinicians. PHI never leaves your tenant boundary except via the encrypted connection we authenticate against, and we sign the BAA before any read.
Three steps. The middle one is the moat. Every other compliance tool stops at finding the gap. We close it, clinician by clinician, on a daily cadence.
OAuth2 to your EMR. New notes and plans in our queue within the hour. No exports. No 30-day lag.
By the billable-encounter record — the only source on most EMRs that names the documenter with both id and supervision chain. Group-note findings copy the clinical supervisor automatically.
Each clinician gets one daily digest. The verbatim chart text is shown before any write. Approve-by-email applies it via API. Auto-apply is opt-in per rule.
Every agent is one focused piece of clinical-QA work. They run on cron, write to their own state store, and respect the same routing and approval rules. The manager agent watches the others and flags anything that's failing or producing anomalous finding volume.
Fifty-four active rules out of an eighty-four-rule catalog. Twenty-four of them propose an auto-fix path. Each rule defines a check, a severity, a category, and the verbatim chart text we'd write if you approve.
TP-01 plan missing diagnosis · TP-04 plan missing measurable goals · TP-07 plan missing problem statement
MN-05 note not tied to a plan goal · MN-08 active plan past 30d without continued-stay justification · MN-09 diagnosis not linked to plan problems
SIG-01 missing client signature · SIG-02 missing guardian signature on minor · SIG-03 plan active past review date without re-sign
GRP-01 not individualized per attendee · GRP-03 group topic missing · GRP-05 no plan linkage
ASAM-01 dimensions referenced but unsupported · ASAM-04 withdrawal management not documented for detox client
QUAL-05 individual note missing standard sections · QUAL-09 missing orientation status · QUAL-03 future-dated note
RISK-01 SI/HI not assessed · RISK-02 risk level not documented · RISK-03 safety plan missing when SI/HI present
REG-03 missing facility assignment · 42 CFR Part 2 redisclosure language
Active client with no recent session contact
CODE-01 missing time-in-session for a time-based code
Where the EMR's API supports the write, we call it directly. Where it doesn't, we run a headless-Chromium worker that signs in as a dedicated clinician account and applies the addendum through the web UI. Either way, the exact text is shown to the approver before anything lands in the chart.
HIPAA, 42 CFR Part 2, encryption everywhere, audit log on every read and every write. We sign the BAA before we authenticate against your EMR for the first time.
Standard BAA signed before any production read. Template available on request.
SUD redisclosure language carried on every patient-facing artifact the engine writes.
TLS 1.3 in transit. AES-256 at rest. Tokens encrypted at rest and rotated on every auth failure.
Every read and write logged with timestamp, user, target, and the diff. Append-only. Retained per BAA.
We read only the fields each rule needs. No PHI written to logs, analytics, or marketing surfaces.
Type 1 plan in place. Type 2 deliverables on a shared timeline at the Enterprise tier.
Thirty-minute discovery call to confirm your EMR and payer mix. Five business days to first audit report. Fourteen days to live digest. The audit is free. The exposure number is yours either way.