Secure Files

A file cabinet your
privacy officer can trust

HIPAA Companion Secure Files keeps PHI documents encrypted, organized, and audited—inside the same platform as your email, fax, and forms.

  • AES-256-GCM at rest
  • Company-scoped RBAC
  • Full audit log
  • Per-company quotas

Built for clinics

Governed storage—not another Dropbox

Staff get a familiar folder browser. Compliance teams get encryption, access controls, and evidence when auditors ask questions.

Encryption at rest

Every file is encrypted with AES-256-GCM before it is written to disk. Keys stay server-side—never exposed in URLs or direct download paths.

Nested folders

Organize policies, imaging packets, and onboarding docs in folders your team understands—without scattering PHI across consumer cloud drives.

Company-scoped access

Each practice or organization sees only its own library. Role-based permissions control who can browse, upload, manage folders, or review audit history.

Storage quotas

Per-company storage limits with a visible usage meter—so multi-site groups can allocate capacity fairly and avoid surprise overages.

Search & integrity

Find files by name across folders. SHA-256 integrity checks on download help catch tampering or corruption before staff open a document.

Audit trail

Upload, download, move, rename, and delete events are logged for compliance reviews—one place to answer who touched which file and when.

How teams use it

From upload to audit in four steps

  1. Sign in to admin

    Authorized staff open Secure Files from the admin sidebar—scoped to their company automatically.

  2. Create folders

    Build a simple hierarchy (Policies, HR, Clinical ops) and upload encrypted documents from the browser.

  3. Share internally

    Colleagues with the right role download through the app—never via public links or email attachments on consumer tools.

  4. Review audits

    Supervisors and compliance leads export activity from the audit log when questions come up.

Included in your stack

Add Secure Files to your rollout

Most practices enable Secure Files during onboarding alongside email and forms—one BAA, one audit story, one vendor to manage.

✓ Encrypted at rest  ·  ✓ Audit logged  ·  ✓ Company-scoped access