Documents for review
Everything a hospital security, compliance, or legal team typically asks for, ready to download. Each is available as PDF and as Markdown for your own systems.
Security Overview
What EMRfi holds, how it's encrypted, access control, hosting, and roadmap items.
Business Associate Agreement
The HIPAA BAA e-signed at signup. Customer paper accepted on request.
Data Flow & Subprocessors
Step-by-step data flow, what never transits EMRfi, subprocessor list, retention.
Security Questionnaire
HECVAT-style summary of the eighteen questions reviewers ask first. Full HECVAT or SIG on request.
Incident Response Summary
Roles, timeline, notification commitments, and how to report an incident to EMRfi.
Epic Build Sheet
Everything an Epic analyst needs to install EMRfi: client IDs, redirect URIs, scopes, launch type, and the test plan.
Security & Privacy Summary
Architecture, what EMRfi stores and never sees, security controls, subprocessors, and independent check results.
ONC Inferno SMART Conformance Report
Pass on the ONC Inferno SMART App Launch STU 2.2 client test suite (public client, EHR launch), November 3, 2026.
Terms of Service and Privacy Policy
Online versions are authoritative.
Need a full HECVAT, SIG, or your own vendor questionnaire completed? Send it through the request form and we'll return it within five business days.