Orion Health's Clinical Portal has comprehensive security features to support health organizations in preventing unauthorized access to confidential patient data. They also ensure healthcare organizations comply with relevant privacy and security regulations, including HIPAA.

Secure access through a Single Sign-On

Each user has a unique user name. Authentication information for each user is encrypted and stored securely.

Access to data based on role and location

Users are only granted access to information and applications if they have the correct security clearance. Individual users are assigned to configurable user groups that determine their level of access to different information systems.

Access can be restricted depending on a user's physical location within the enterprise, and restrictions can also be imposed on individual documents.

Recording and enforcing patient consent

Some jurisdictions legally require healthcare organizations to obtain specific consent from patients for the use of certain types of personal health data. The Clinical Portal provides electronic tools for hospital staff to record consent and patient preferences, which can then be automatically enforced.

Inactivity time-out

After a pre-defined period of inactivity within the Clinical Portal, a user will be automatically logged out. This reduces the chance that patient could be inadvertently viewed by unauthorized parties. Time-out periods can be adjusted to reflect the security risks of different departments and different physical environments within an enterprise.

Full audit log

All user activity within the Clinical Portal is recorded in a permanent audit log. Sign-ons, sign-outs, applications used, security overrides, patients viewed and documents viewed are all recorded. The Portal stores audit data in a separate audit database.   

"Opening the privacy seal"

In emergency situations or with specific patient permission, a physician may need to override normal security conditions. The Clinical Portal provides a function that will allow physicians to view data normally restricted to them, by "opening the privacy seal". Physicians must enter a reason for the override. All security overrides are recorded in an audit log, and the information remains secure to those who have not opened the seal.

Request a demonstration of Clinical Portal...

Download brochure:

Clinical Portal for Physicians...

Clinical Portal for Healthcare Organizations...

Clinical Portal for IT Professionals...

Patient Privacy brochure...