Security & auditability
Built like the bridges behind it
Redundant, inspectable, over-engineered where failure is unacceptable, the posture AHR takes toward record security.
Safeguards
Controls, not promises
Each safeguard is visible in the product: policy screens you can read, audit entries you can search.
Access policy
Roles scoped by facility, department, and relationship to the patient. Sensitive charts require documented justification before opening.
Session control
Idle expiration with warnings, workstation trust, simulated multi-factor sign-in, and forced password rotation on schedule.
Audit trail
Every view, signature, order, export, and print leaves an immutable entry with actor, workstation, and facility context.
Infrastructure
Encryption in transit and at rest, controlled change management, and monitored interface routes. Steel, not slogans.
Accountability
The trail tells the truth
Audit search answers who opened a chart, from which workstation, under what organization, and exports the answer.
- Searchable by actor, action, patient, facility, and time range
- Failed sign-ins and lockouts recorded with source context
- Exports are themselves audited; the trail watches itself
- Retention windows configurable per organizational policy
audit search · facility = Monongahela
09:14 okafor.c VIEW-RECORD AHR-004821 WS-TRC-0104
02:14 unknown LOGIN-FAILED · WS-UNKNOWN-17 locked
01:03 whitfield.a SIGN-NOTE AHR-006102 WS-MRC-0311
23:47 kowalczyk.j MED-RECONCILE AHR-006102 WS-TRC-0109
4 of 229 entries · illustrative