Notice covering alleghenyhealthrecords.com and the AHR clinical record platform

Allegheny Health Records (AHR) builds health record software for regional care organizations. This notice explains what information this website and its signed-in workspace handle, and what choices you have. AHR is not a medical provider. If you receive care from a participating organization, direct questions about your treatment or your HIPAA rights to that provider’s privacy officer.

Session and workstation data

Signing in sets one first-party cookie, ahr_session, which keeps you signed in. Two more cookies, workstation-identity and workstation-trust, let the workspace recognize a device you have used before and apply stricter checks on one it has not. None of them are used for advertising, and they expire with the session or within thirty days. Our server logs record the IP address, the time, and the page requested, for security and audit purposes. We keep those logs according to the retention schedule in the acceptable use policy.

Health information

Clinical records in the platform belong to the organizations that operate them. AHR works as their business associate: only their workforce users can reach protected health information, under the access rules those organizations set, and every lookup lands in an audit trail that cannot be edited afterward. We do not sell that information or share it outside those organizations. This website itself does not ask visitors for health information, and the material on the public site is for illustration.

Your choices

You can turn down optional cookies and still sign in. Clearing the workstation cookies is fine too; the workspace will simply ask you to verify the workstation next time. If you hold a workforce account and want to review or correct what is tied to it, contact your organization’s administrator or our privacy office.

Contact

Questions about this notice can go to the AHR privacy office at privacy@alleghenyhealthrecords.com.