Stay HIPAA compliant
ContactFollowUp does the application-layer work HIPAA requires, so the safe path is the default path.
Field-level encryption
Every PHI field — names, email, phone, date of birth, address, notes, intake answers, insurance, secure-message bodies — is stored as AES-256-GCM ciphertext in dedicated*_enc columns. A raw database dump is unreadable. Search still works through deterministic blind-index hashes, so the plaintext is never needed to look a patient up.
Immutable audit log
Every write emits an append-only entry — actor, action, and target. Nothing in the application updates or deletes an audit row. Review it any time in Audit log, and export it (CSV/JSON) for your Security Officer.
Access control
Role-based access (Admin / Manager / Agent / Read-only) plus per-record sharing means people see only what they own or what’s explicitly shared with them. Turn on MFA and OIDC SSO in Settings → Security.
BAA tracking
Track your downstream subprocessor BAAs in Settings → Subprocessors (BAA). We sign a BAA with every covered customer.