Healthcare organizations
Healthcare partnership inquiries for organizations whose patients need their records elsewhere.
Your records department is measured on the requests it fulfills. Your patients are stuck on the requests they have to make elsewhere. We handle the outbound side, under the patient's authorization, and keep you informed.
Partnership discussions are welcome through our contact page. Enrollment, commercial terms, integrations, and service commitments are not available until each is reviewed and published.
On the record
The facts worth knowing
- 01
Patients can direct their records to a third party they name, such as a law firm or care team, with a signed written request that providers must honor. That patient-directed path is how records reach partners through MedicalRecords.com.[1]
- 02
A valid HIPAA authorization must identify the information, the recipient, and an expiration, and the patient can revoke it in writing. We don't accept blanket or open-ended authorizations.[2]
- 03
An organization that handles protected health information on a covered entity's behalf is a business associate and must sign a business associate agreement before any data moves.[3]
The guide
What to do, in order
What we handle
Patient-authorized requests to other providers: the new specialist who needs the history, the insurer who needs proof, the lawyer who needs a timeline. We submit, follow up and deliver.
What stays with you
Your own release-of-information process. We don't replace it, and we don't ask for access to your systems.
Compliance posture
Requests are patient-directed under the right of access. Where a workflow would make us a business associate, a business associate agreement comes first, not after.
Not yet available
Integrations and service-level commitments are published only after review. We can describe the current process in writing and start small.
How it works
Working with your organization
- 01
Tell us which patient journeys you want covered.
- 02
Describe expected volume and the providers your patients most often request from.
- 03
We confirm what is available now and what requires a business associate agreement.
- 04
Start with a defined pilot and written expectations.
Inquiries go to the team that runs records coordination. We reply with what we can and cannot do today, in writing.
Questions people ask
Straight answers, with sources
Can we enroll or sign a contract today?
Not yet. Commercial terms, integrations and service commitments are published only after they are reviewed. What you can do today is tell us what you need, and we will answer in writing with what is available now.[1]
How do records reach a partner?
Through the patient. The patient signs a request naming the recipient, we submit it to each provider, follow up, and deliver the records to the named recipient. Nothing moves without that authorization.[1]
Do you share patient data with partners for marketing?
No. Records go only where the patient directs them, under an authorization that names the recipient and expires. We don't sell or share patient information.[2]
Sources
Where this page comes from
Primary sources only. Each entry says what the source itself states. This is reference material, not legal or medical advice, and the cited guidance controls its own scope and exceptions.
- [1]Individuals' Right under HIPAA to Access their Health Information
HHS Office for Civil Rights · hhs.gov
Covered providers and plans generally must act on an access request within 30 calendar days, may take one 30-day extension if they tell you why in writing, may charge only a reasonable cost-based fee, and must send a copy to a third party you name in a signed written request.
- [2]45 CFR 164.508 Uses and disclosures for which an authorization is required
eCFR (U.S. Government Publishing Office) · ecfr.gov
What a valid HIPAA authorization must contain, including the specific information, the recipient, an expiration, and the right to revoke.
- [3]Business Associates
HHS Office for Civil Rights · hhs.gov
When an organization handles protected health information on behalf of a covered entity it is a business associate and must sign a business associate agreement.