Built for Enterprise Security Review
The controls a health system, IDN, or RCM partner needs to evaluate before onboarding.
Security
PHI is encrypted at rest with AES-256-GCM and in transit with TLS, with full audit logging and role-based access control on every record.
Data Handling
PHI is retained for 7 years per HIPAA requirements and auto-purged afterward. Patient health information is never used to train AI models.
Business Associate Agreement
Available on request.
Patent
Patent pending.
References
Client references available upon request.
Vendor Readiness Kit
A W-9, certificate of insurance, security questionnaire (SIG or CAIQ), and VPAT are provided on request during vendor onboarding.
Implementation
Minimal implementation. No major EHR integration required to begin. Works alongside your existing clearinghouse workflow, with an optional EHR connection available later.
Documentation Integrity
ReCapture never adds clinical facts that are not in the record. It organizes what the physician documented into the structure each payer requires, and flags what's missing for the physician to review. The record remains the physician's.