01HIPAA compliant
Built for teams handling protected health information, with access controls, storage practices, and accountability appropriate to that work.
Security
HIPAA compliant. SOC 2 ready. BAAs are in place.
Workers’ Compensation data is sensitive. We use the approved public words — and we do not say SOC 2 certified or SOC 2 compliant.
Controls
How MediCase protects case data
01
02BAAs are in place
Business Associate Agreements are in place, including for AI processing of incoming email, fax, and filed documents.
03SOC 2 ready
MediCase is SOC 2 ready. We do not claim SOC 2 certified or SOC 2 compliant.
04Role-based access
Permissions scoped so case managers, billing, program staff, and admins see what their work requires.
05MFA and audit trails
Second-factor options and record-level history of who accessed, changed, or submitted what, and when.
06Secure cloud storage
Documents and case data held in managed cloud infrastructure under your organization’s controls.
Business Associate Agreements
Business Associate Agreements are in place, including for AI processing of incoming email, fax, and filed documents. The FAQ, trust strip, and footer keep the short line: BAAs are in place.
Start with your caseload
Choose a plan. Larger plans are reviewed before a workspace is created.