Trust & Compliance
MediCRM is built for behavioral health, where trust is everything. Our compliance program is designed to meet the bar set by health systems, counties and state agencies.
Our security, availability and confidentiality controls are independently audited over time under the SOC 2 Type II framework. Reports are available to qualified customers under NDA.
Full administrative, physical and technical safeguards, Business Associate Agreements, and heightened protections for substance-use records.
Data encrypted in transit and at rest, enterprise RBAC/ABAC with field-level masking, temporary grants and break-glass access — every action audit-logged.
Strict per-practice data isolation, automated nightly backups with restore, and object-storage redundancy.
Our team will share compliance documentation with qualified customers.
Request compliance docs