Access permissions
Individual accounts and role-based, module-level permissions let you control what each team member can access. Accounts can be suspended when access is no longer needed.
Security & compliance
Patient information needs controlled access, protected storage, and a clear record of activity. QHealth brings these safeguards into your clinic’s daily work.
Controls for the people, records, and services your clinic relies on.
Individual accounts and role-based, module-level permissions let you control what each team member can access. Accounts can be suspended when access is no longer needed.
Authenticator apps add a verification step at sign-in. Clinic administrators can require authenticator use across their team and manage account recovery through authorized processes.
User identities, timestamps, and activity history help you review changes and investigate events. The detail recorded depends on the module and workflow.
QHealth supports replication for continuity and separate, protected backups for recovery. Backup and recovery arrangements are covered in your service agreement.
Integration reviews cover authenticated connections, encrypted transport, scoped permissions, and the information shared with external providers.
Compliance
QHealth’s technical safeguards are designed to support HIPAA-compliant operations. Compliance also depends on appropriate customer and service-provider agreements, system configuration and use, organizational policies, and staff training.
Where HIPAA applies, business associate agreements form part of the review with your clinic and relevant service providers.
Platform safeguards and the hosting, maintenance, and recovery responsibilities set out in your agreement.
Access approvals, staff training, device security, and policies for handling patient information.
Cloud infrastructure
QHealth’s cloud infrastructure combines private connections, network access controls, and encryption to protect patient and clinic information.
Enterprise
For Enterprise clinics and hospitals, we can discuss specific hosting, data location, network, and compliance requirements with your IT team. Let’s talk about what your organization needs.
Please do not include patient information or credentials in your message.