Security and compliance

Built for protected health information from day one.

How Dictora protects patient data, keeps clinicians in control and fits your organization's security requirements.

Clinicians stay in control

Notes, orders, codes and letters stay drafts until a clinician reviews and signs. Nothing is filed to the chart on its own.

Access control

Single sign-on, multi-factor authentication and role-based access for every role on the care team, with biometric lock on supported devices.

Complete audit trail

Every edit, signature and filing event is audit-logged, and filing to the EHR is tracked until a receipt comes back.

Encryption

Data is encrypted in transit and at rest, and access to production systems is limited to authorized personnel.

Evidence and review

Coding suggestions link to the documentation that supports them, and a certified coder confirms before anything is billed.

Standards-based integration

Built on SMART on FHIR and HL7 to work with Epic, Oracle Health, MEDITECH, athenahealth and other leading EHRs.

Accessible by design

Interfaces built to WCAG 2.1 AA, with voice navigation and keyboard support throughout.

Synthetic demo data

Every demo and product screen on this website uses synthetic patients. No real patient information is shown.

Security reviews welcome

We are glad to complete your security questionnaire and walk your team through our architecture.

HIPAA

Business Associate Agreements

Dictora is designed to support the requirements of the HIPAA Privacy and Security Rules. We enter into a Business Associate Agreement with covered entities before Dictora processes any protected health information.

For security documentation, a completed questionnaire or a conversation with our team, email hello@dictora.org.

Give your clinicians their time back.