Security & HIPAA

Protecting resident information

Group homes handle protected health information every shift. HealthCache is designed to help you keep it safe and meet your HIPAA obligations.

Encryption in transit

All traffic between your browser or iPad and HealthCache uses HTTPS (TLS).

Role-based access per home

Staff see only the homes and records their role allows. Access can be changed or removed at any time.

Audit trail

Changes to clinical records — med passes, notes, incidents, sign-offs — are recorded with who made them and when.

BAA on request

HealthCache will sign a Business Associate Agreement with covered operators. Ask us in chat.

Shared responsibility

HIPAA compliance is shared between HealthCache and each operator. We provide the safeguards built into the software; you remain responsible for your own policies, staff training, who you invite, and how devices such as iPads are secured and passcode-protected in your homes.

Access and accounts

  • Every staff member has their own sign-in — shared logins are not supported.
  • Roles determine what each person can view and change, scoped to the homes they work in.
  • Remove a departing employee’s access in one step from the staff area.

Your data

  • Your organization’s records belong to you. Reports export to PDF or CSV, and you can ask us for a full export.
  • Payment card details for your subscription are handled by Stripe and are not stored by HealthCache.
  • Records sent at discharge use HealthCache’s secure records transfer.

Reporting a concern

If you believe you have found a security issue or that resident information has been exposed, contact us right away through chat on the Contact page. See also our Privacy Policy.