Built to sit next to PHI.

PHI is held in memory only for the length of a review.

Charts arrive over HL7 FHIR from your EHR. Chart-Shark reads the record, runs your filters, and compiles the review. When the review is signed off, the chart data is released. Protected health information is not stored outside your record system.¹

Every read, draft, and edit is logged.

The audit log records what was read, what Chart-Shark drafted, and what your reviewer changed, each entry timestamped and attributable to a user or to the system. Corrections are versioned, so a finding's history is always available.

Access and transport

• Data in transit is encrypted end to end.
• Access is scoped per facility and per role. Reviewer, Process Editor, and Admin roles are assignable.
• Single sign-on through your identity provider is supported.

Your charts do not train models.

Chart-Shark does not use your charts, your filters, or your review decisions to train models shared with anyone else. Your filters and review instructions remain your program's work.

HITRUST r2 certification is in progress.

Chart-Shark is working toward HITRUST r2 certification, HITRUST's most comprehensive security assessment. This page will be updated when certification is complete.

Security review

Hospital IT and compliance teams can request our security documentation, a data flow description, and a business associate agreement before a pilot begins. Write to info@chart-shark.com.

1 Record identifiers are retained in the audit log for HIPAA compliance. No medical information is retained. ↩