Technology companies
Technology partnership inquiries for products that need records retrieval behind them.
If your product needs a patient's records from arbitrary providers, you have discovered that the hard part is not the API, it is the fax machine. We do the retrieval; you keep the experience.
Partnership discussions are welcome through our contact page. Enrollment, commercial terms, integrations, and service commitments are not available until each is reviewed and published.
On the record
The facts worth knowing
- 01
Patients can direct their records to a third party they name, such as a law firm or care team, with a signed written request that providers must honor. That patient-directed path is how records reach partners through MedicalRecords.com.[1]
- 02
A valid HIPAA authorization must identify the information, the recipient, and an expiration, and the patient can revoke it in writing. We don't accept blanket or open-ended authorizations.[2]
- 03
An organization that handles protected health information on a covered entity's behalf is a business associate and must sign a business associate agreement before any data moves.[3]
The guide
What to do, in order
What we provide
Patient-authorized retrieval from any U.S. provider, with verified status updates and secure delivery. The patient's authorization names your product as the recipient.
Integration status
Programmatic integrations are not published yet. We can discuss the request and delivery formats we support today and what is pending review.
Data handling
Records move only under the patient's authorization. Where a workflow makes us a business associate, a business associate agreement is signed first.
How to start
Describe your product, the patient journey, and the volume you expect. We reply in writing with what is available now.
How it works
Working with your product
- 01
Describe your product and where records fit in the patient journey.
- 02
Tell us expected volume and the delivery format you need.
- 03
We confirm current capabilities and compliance requirements in writing.
- 04
Begin with a defined pilot.
Inquiries go to the team that runs records coordination. We reply with what we can and cannot do today, in writing.
Questions people ask
Straight answers, with sources
Can we enroll or sign a contract today?
Not yet. Commercial terms, integrations and service commitments are published only after they are reviewed. What you can do today is tell us what you need, and we will answer in writing with what is available now.[1]
How do records reach a partner?
Through the patient. The patient signs a request naming the recipient, we submit it to each provider, follow up, and deliver the records to the named recipient. Nothing moves without that authorization.[1]
Do you share patient data with partners for marketing?
No. Records go only where the patient directs them, under an authorization that names the recipient and expires. We don't sell or share patient information.[2]
Sources
Where this page comes from
Primary sources only. Each entry says what the source itself states. This is reference material, not legal or medical advice, and the cited guidance controls its own scope and exceptions.
- [1]Individuals' Right under HIPAA to Access their Health Information
HHS Office for Civil Rights · hhs.gov
Covered providers and plans generally must act on an access request within 30 calendar days, may take one 30-day extension if they tell you why in writing, may charge only a reasonable cost-based fee, and must send a copy to a third party you name in a signed written request.
- [2]45 CFR 164.508 Uses and disclosures for which an authorization is required
eCFR (U.S. Government Publishing Office) · ecfr.gov
What a valid HIPAA authorization must contain, including the specific information, the recipient, an expiration, and the right to revoke.
- [3]Business Associates
HHS Office for Civil Rights · hhs.gov
When an organization handles protected health information on behalf of a covered entity it is a business associate and must sign a business associate agreement.