Security

Compliance you don't have to manage.

Q: Can a signed note be changed?

No. Signed notes lock. An amendment is tracked as its own entry and the original stays in the record.

We sign a Business Associate Agreement with every practice. Audit trails, locked records and consent-first AI are how the platform works, not settings you have to find.

Book a demo

All features included Free migration No per-session AI fees Consent-first AI

The defaults

On for every practice, from day one.

Locked notes, audit trails and consent-first AI. Handled for you.

Built for protected health information

Notes, messages and telehealth in one place, encrypted throughout.

NotesMessagingTelehealth

Consent-first AI

Recording starts only when you press start. The client sees a consent prompt. A recording indicator stays visible.

Recording this sessionConsent given

Stop it at any time. It runs only when you start it.

Records that hold up

Signed notes lock. Amendments are tracked, never overwritten. Messages can't be edited or deleted.

Progress note, signedLocked

Amendment added 12 Feb. The original is still there.

Full audit trails

Every action is logged: who, what and when. You can also see who viewed each record.

Supervisor viewed record14:32

Note signed and locked14:35

Audit log for a patient record

SupervisorViewed record14:32

ProviderAmendment added14:34

ProviderProgress note signed14:35

Signed note locked, amendment kept on top

Every action on a record is logged: who, what and when. Viewing is logged too, not only changes. A signed note locks, and an amendment is added on top instead of overwriting the original.

Access

Who sees what, decided by you.

Five layers of access control keep a growing practice in order. Nobody gets slowed down.

Five built-in roles plus unlimited custom roles. View or manage control for each feature area
Departments with three visibility modes: open, department, or strict
Clients are assigned to a team, not only a provider, so coverage and hand-offs stay clean
A record access log shows who viewed each chart, not just who changed it

Payments

Card data that never touches us.

Payments run on Stripe-hosted card forms. Card details go straight to Stripe and never through Eggmed.

Stripe-hosted card capture, so card data never touches Eggmed
Clients add their own card through a secure link that expires after 48 hours
Verbal consent for a card on file is recorded, not assumed
Refunds go back to the original card, with the payment record kept

No Surprises Act

Good Faith Estimates, tracked to done.

Good Faith Estimates for self-pay clients, with the No Surprises Act disclosure text built in.

Estimates move from Draft to Sent to Viewed to Acknowledged, so overdue ones stand out
Compliance rate tracked across your whole practice
Built-in NSA disclosure and dispute-resolution language
Handled inside the same platform as scheduling and billing, not a side spreadsheet

Always on

Included by default.

Every protection is in the one plan, for every practice.

Per-client audit logs

Record access log, who viewed what

Signed notes lock, amendments tracked

Messages can't be edited or deleted

Attestation at signing

Consent-first AI recording

Calendar sync shares times only, never notes

Expiring secure payment links

Documented reasons on waivers and refunds

Type-to-confirm on destructive actions

Good Faith Estimate tracking

Encrypted messaging and telehealth

Switching

Moving is the easy part.

Free migration, handled by our team. We agree on the scope, checks and timing before your move.

MigrationFree, done by our team

Export from your old platformDay 1

Clients, notes and appointments mapped

Checked with you before you switch

Run both side by side

Until you stop using the old one

Seeing clients in Eggmed, a day or two later

Our team does the move. You keep working while it happens.

See how switching works

FAQ

Security questions

The short answers. We can walk through the rest on a call.

Book a demo

Is Eggmed HIPAA compliant?

We act as your business associate under a Business Associate Agreement that starts when your account is created. The platform, telehealth and messaging are encrypted. Signed notes lock, amendments are tracked, and every action is logged with who, what and when.

Can a signed note be changed?

Yes, through a tracked amendment. Signing locks the original note; the amendment is recorded separately so the original and the change history remain available.

Is the AI listening to my sessions?

Only when you start it. Recording is manual. Your client sees a consent prompt and a visible indicator stays on.

Who can see a client's chart?

You decide. Roles, teams and departments control access. A record access log shows who viewed each chart.

How is card data handled?

Card forms are hosted by Stripe, so card details never touch Eggmed.

What about the No Surprises Act?

Good Faith Estimates are built in. Statuses run from draft to acknowledged, and the NSA disclosure text is included.