HIPAA & 42 CFR Part 2 compliance
End-to-end encryption, organization-level data isolation, and detailed access logging.
⏱ 8 min read
MediCRM Reports is built for behavioral health and substance-use data, which means HIPAA and 42 CFR Part 2 compliance are baked in.
What's included
- End-to-end encryption in transit and at rest
- Organization-level data isolation (no cross-tenant leakage)
- Detailed access logging for every report view and export
- Self-expiring encrypted sharing links
- BAA available on Professional and Advanced plans
42 CFR Part 2
Substance-use records get stricter handling than general medical records. The engine enforces the consent and re-disclosure rules Part 2 requires — including audit trails for every access to SUD-related data.
Need a BAA?
A Business Associate Agreement is included on Professional and Advanced plans. Contact your success manager to get it signed.