Audio is never stored, every PHI touch is logged, and clinical data leaves the platform as structured HL7 and FHIR R4 — not pasted text.
One clinical record at the center — e-prescribing, labs, the patient portal and billing all read and write the same structured data.
Patients book, read results in plain language, message the care team and stay on a chronic-care plan — all against the record the clinician just signed.
The questions compliance officers and IT reviewers ask first, answered directly.
No. Audio is processed to produce a draft clinical note and is not retained as a recording. The resulting note becomes part of the patient record under the provider’s control, and the clinician reviews and signs it before it is final.
Yes. A Business Associate Agreement is executed before any protected health information reaches the platform. Under HIPAA the practice is the covered entity and Codavia Health acts as a business associate, processing PHI only on the provider’s instructions.
In the United States. Data is encrypted both at rest and in transit, with role-based access control and full PHI audit logging so every access to a record is attributable.
The SOC 2 audit has been completed. Report requests go to info@codavia.health.
Through HL7 and FHIR R4. Interoperability is one of the twenty-one modules rather than a paid connector, so lab and imaging results post back into the same patient record the clinician is already working in.
Access is governed by role-based access control, configured per organisation. Every view and change is written to a PHI audit log.
A 30-minute walkthrough on a live chart — ambient scribe, decision support, coding and the patient portal, end to end.
Book A DemoQuestions about pricing, migration or a specific specialty? A real person replies within minutes during business hours.
Book A Demo Email us