Security

Every look at a record, on the record.

CoolFocus keeps a trail of who viewed, changed, and signed each record, limits what every staff member can see, and lets you require approved networks and multi-factor sign-in. Built for PHI, with a Business Associate Agreement you sign in the app.

How it works

Protection you can see. From the record’s own trail to the agreement your board asks about, every safeguard lives in CoolFocus, where your administrators can check it.

Every change keeps its before and after. Each record has a Log of who changed which fields and when, and the Chart Access Log shows who opened a clinical chart.

Safeguards

Built for PHI. HIPAA safeguards built into the product for the most sensitive information anyone will share with your center. Plan requirements are noted where they apply.

  • Full audit trails

    Record trail, staff access log, security event log, and delete history.

  • User-group permissions

    Control what each group of staff and volunteers can view, create, update, and delete.

  • Premium

    Record-level access controls

    Restrict specific records to the people who need them.

  • Premium

    Field locking & chart approvals

    Lock charted fields, require multi-staff approvals, and keep sign-off history.

  • IP-based login restrictions

    Limit sign-in to your center’s approved networks.

  • Required multi-factor authentication

    Require MFA for everyone in your organization.

  • Plus and up

    Secure client portal messaging

    Exchange PHI with clients through the portal instead of plain text.

  • Encrypted at rest

    Your database is encrypted at rest with Azure SQL Transparent Data Encryption.

  • Business Associate Agreement

    Sign and download your BAA in the app under Settings → Legal & Compliance.

  • Encrypted in transit

    Every connection to CoolFocus runs over HTTPS, on Microsoft Azure.

  • Chart Access Log

    See who opened clinical charts and review sheets, and when, and export it to CSV.

  • Approve a blocked network

    When a sign-in is blocked by IP restrictions, an administrator can approve that address right from the Security Log.

Protect every record from day one.

Sign up in a few minutes, sign your BAA in Settings, and turn on the safeguards your center needs.