Security & compliance
HIPAA compliant. BAA on Day 1.
Here is the whole list of what we claim, and nothing we don't. Questions about any of it go to security@maxmrj.com.
Certified Development Partner- Bidirectional. Pulls the patient profile (name, room, admit date, DOB, gender). Pushes the progress notes your staff choose to write back.
- Already approved. MAXMRJ went through PointClickCare's validation process to become a Certified Development Partner, so the connection is not an IT project.
- Optional. $99 per facility per month, billed by MAXMRJ.
What we claim
Six things, stated plainly.
HIPAA
- HIPAA compliant
- Business Associate Agreement (BAA) signed on Day 1
Encryption
- In transit (TLS)
- At rest (AES-256)
Access
- Access controls and role-based permissions
- Audit logging
- Multi-factor authentication supported
Infrastructure
- Enterprise-grade cloud hosting
- Continuous monitoring and automated backups
Payments
- PCI-DSS-compliant payment processing
Your data
- Data export or deletion on request
- No data sold or shared
Need something in writing for your compliance team? Email security@maxmrj.com.
BAA on Day 1.
Pilot from your first discharge.
Your team signs the BAA and picks the buildings. The 60-day pilot clock starts at the first discharge, not when IT connects.