MediCRM logoMediCRM
42 CFR Part 2

Substance-use disorder privacy controls

Programs treating substance use disorders often carry heightened confidentiality obligations under 42 CFR Part 2. MediCRM includes controls that help support these workflows.

HIPAA-Aligned Safeguards

PHI encrypted in transit & at rest

42 CFR Part 2 Controls

Substance-use privacy protections

BAA Available

Business Associate Agreement

Org-Level Isolation

Separation at the database layer

Consent & disclosure

  • Consent templates with expiration alerts
  • Accounting of disclosures
  • Release-of-information workflows with e-signature

Controlled sharing

  • Consent-gated Care Circles for cross-organization coordination
  • Field-level sharing permissions
  • Full audit of shared record access

This page describes product capabilities for informational purposes and is not legal advice. HIPAA compliance depends on your organization's complete program, policies, and Business Associate Agreement. No software alone makes an organization compliant.