The record system decides everything else
Whether it is on a server in the building or in the cloud changes the entire design, including what your internet connection has to survive. We work to what the system actually needs rather than a generic template.
Devices leave the building, and that is the risk
Laptops and tablets holding or reaching patient data are the most likely thing to be lost. Encryption and the ability to wipe a device remotely turn a serious incident into an inconvenience, and both are usually already licensed and switched off.
A single practice with one server carries concentrated risk
One machine, out of warranty, holding everything, with a backup nobody has restored. That is the common shape and it is the first thing we test rather than discuss.
Adding providers exposes the network
Each new provider adds devices, records and simultaneous demand. Practices usually notice at the point where opening a record starts taking noticeably longer, which is a capacity problem rather than a software one.
Common questions
- Do you handle HIPAA compliance?
- We implement and document the technical controls, which is a real part of it but not all of it. Policies, training and agreements sit outside IT and we will say so rather than let you believe you are fully covered.
- Can you work with our EHR vendor?
- Yes, and we prefer to be involved in upgrades. Most reported EHR problems turn out to be network, server or permissions, which is our side of the line.
- Are our laptops encrypted?
- We check rather than assume. Most business laptops can be encrypted with software you already own, and it is frequently just switched off.
- What happens if a device is lost?
- With device management in place it can be wiped remotely and you can show that it was, which is the difference between an incident and a reportable one.
- Our insurer is asking about controls. Can you help?
- Yes. It is usually multi-factor authentication, monitored protection, encryption and tested backups, and being able to evidence them often changes the quote.
- Can you support us outside clinic hours?
- The phone is answered 24/7 and disruptive work is scheduled around your diary. Nothing planned happens mid-clinic.
Where we do this
These are the towns where this kind of business actually clusters. We work across the whole 30 mile area, so if you are somewhere else on the list, call and ask.
Start with a phone call
You describe what is annoying you. Fifteen minutes, no discovery-call ritual.
Other industries