Security

Security built for healthcare practice ops

Case PI Tracker protects case operations data with practice isolation, role-based access, audit logging, and careful handling of sensitive workflow records.

Access and tenancy

• Authentication with access and refresh tokens, plus password policy controls
• Optional multi-factor authentication (TOTP) for user accounts
• Role-based permissions so staff only act on what they are allowed to see
• Practice-scoped tenancy across core records
• Login domain controls for practice administrators

Visibility and accountability

• Immutable activity events for meaningful case workflow changes
• Clear ownership when someone asks who changed a status or assignment
• In-app support tickets with practice context instead of a shared inbox free-for-all

Data in transit and attachments

• TLS for production traffic via reverse proxy
• CORS restricted to known origins
• Secrets kept out of source control
• Private object storage path for case attachments

Healthcare data & compliance posture

Case PI Tracker is built with a HIPAA-capable architecture (access controls, audit logging, practice isolation, encrypted transport). We do not claim HIPAA certification. For customer environments that process PHI, we work under applicable agreements (including a Business Associate Agreement where required) and complete the hosting, backup, and operational controls expected for that deployment.

• Link-oriented operational notifications (avoid embedding unnecessary PHI in email)
• Private attachment storage with audited access
• Customer agreements and BAAs available during commercial / vendor review

Enterprise / vendor review

If your IT or security team has a questionnaire, bring it to the demo. We map Case PI Tracker controls to your checklist and share security documentation during vendor review — hosting expectations, access model, audit trail, and incident contact paths.

Report a security issue

Email security@casepitracker.com. Do not include patient or case identifiers in vulnerability reports.

Talk through security on a walkthrough Pricing & BAA path on paid plans