Built for health data from day one
Leave paperwork is full of diagnoses, dates and employer details. This page sets out, in plain words, how DoctorPaperwork looks after it: who can see it, where it travels and what we record.
The short version
- Signed Business Associate Agreements with the services that touch patient data
- Two-step sign-in required for every staff member and doctor
- Texts and emails carry a secure link, never health details
- Every sensitive action recorded in an audit log
- A signed packet can't be quietly changed
Business Associate Agreements
Every service that stores or handles patient information for us does so under a signed Business Associate Agreement.
Hosting, email and AI
Amazon Web Services: the servers the app runs on, the email we send, and the AI that drafts your forms (Claude, through Amazon Bedrock).
Database
MongoDB Atlas, on a dedicated cluster.
Fax
Sinch, which sends the signed packet when a practice chooses fax delivery.
Who can get in
Two-step sign-in, required
Every staff member and doctor signs in with a password and a code from an authenticator app. One-time backup codes cover a lost phone, and a reset by an administrator is recorded.
Guarded passwords
Passwords are stored only as a one-way hash. Repeated wrong guesses lock the account for a while, and "sign out everywhere" ends every session at once.
Each practice sees its own
Staff see only their own practice's patients. Within a practice, roles decide who can review, who can sign and who can change settings.
How patient information travels
Link-only messages
Texts and emails to patients, staff and employers carry a secure link and nothing else: no names of conditions, no dates, no attachments. The packet itself is opened from the link.
Links that expire
Patients don't need an account. Their link is long and unguessable, and it expires. Staff can renew it for the same case without starting over.
Encrypted on the way
Every page and file moves over HTTPS.
Fax only when chosen, and only under a BAA
Fax is the one channel that sends the packet itself, so it stays switched off unless the fax provider's BAA is in place.
What the AI sees, and what it can't do
Identifiers removed first
Before any text goes to the AI, names, phone numbers, email addresses, Social Security numbers and calendar dates are stripped out. It works from durations, not dates.
Form images under the BAA
A photo of the employer's form can't be scrubbed, so it is read only by an AI service covered by our Business Associate Agreement. Without that cover, the image is never sent.
A draft, never a decision
The AI prepares a draft with gaps flagged. Your staff review it and only the doctor can sign.
A record you can trust
Audit log
Viewing or downloading patient documents, AI drafting, signing, sign-ins and exports are all recorded. Practice administrators can read their own practice's log.
Signed means final
A signed packet can't be quietly changed. A correction goes through a tracked revision request and a fresh signature from the doctor.
About HIPAA
DoctorPaperwork is built for HIPAA-regulated practices. HIPAA compliance is shared between a practice and the vendors it works with, so we would rather show you how the controls work than put a badge on the page. For our security details, or to ask a question your compliance team has, write to support@adargahealthtechnologies.com.
See the controls for yourself.
We'll walk your team through sign-in, review and signing in a 20-minute walkthrough.