Built for HIPAA.

Every person has their own account. At shared stations, each action is credited to the badge holder.

Two-factor sign-in on every account before any data opens.

Raising someone's access is a request another person approves, and changing access ends that person's open sessions.

After 30 minutes by default, set by each pharmacy from 5 to 240 minutes. Station screens lock after 10 idle minutes.

Revealing an SSN, a bulk export, emergency access, each approval decision. Nobody decides their own request.

It lasts one hour, needs a fresh code and a reason, and every use is recorded.

A two-factor code at sign-in, and sign-out after 15 idle minutes.

Each state license is verified at the primary source. The queue shows cases only from states where your license is active and verified.

A claim holds the case for 30 minutes, so no one reviews it twice.

Opening a patient record, a prescription's details or a shipping address writes an audit entry. A daily check flags unusual read volume.

Each audit entry records who, when, from which device and network, and how they signed in.

Audit entries are kept 7 years by default, and the application cannot edit or delete them.

Corrections are new entries that reference the original.

Both are hash chained and verified daily.

Reading a patient's record writes an audit entry.

Notes are never rewritten. Corrections are added as addenda.

License, compliance and product checks run again at every approval. If anything is off, it stops.

HTTPS only, and the services refuse to start on an unencrypted database or cache connection.

Patient names, dates of birth, addresses, insurance, allergies, conditions, medications, notes and messages are encrypted field by field with each pharmacy's own key, protected in Azure Key Vault. Databases, backups and file storage are encrypted too.

Each pharmacy can rotate its own key.

HTTPS only, and the database accepts only encrypted connections.

The database is encrypted at rest.

Patient details are kept out of logs and telemetry. There is no session replay or third-party analytics in the app.

The API returns purpose-built responses, never whole records.

Labels with patient details print only over a direct network connection or the browser.

The model that reads prescriptions runs inside PolarityRx.

Uploads through intake, e-prescriptions and attachments are scanned for malware.

Access, accounting of disclosures and amendments.

Patient consent is captured, and identity is verified before checkout.

Payment is authorized at checkout and captured only on approval.

Patient and care team threads stay with the case.