Security & privacy
Designed to protect operational data.
PHC Staff Hub is built with HIPAA-conscious design principles: least-privilege access, strict separation between organizations, and an audit trail behind sensitive actions.
Capabilities
Controls built into the platform.
Role-based access
Platform, agency, unit manager, staff and auditor roles decide what each person can see and do.
Agency separation
Each organization's records are isolated at the database level, enforced on every request.
Audit logging
Sensitive actions are recorded with who, what and when, and cannot be quietly edited away.
Secure media
Photos and videos are stored privately, shared through expiring links and governed by consent settings.
Retention controls
Configurable auto-expiry and deletion for media, with legal hold when records must be preserved.
Account lifecycle
Deactivation immediately blocks sign-in and closes open assignments while preserving historical records.
Privacy practices
Minimize what is collected.
The workforce platform is designed to run without protected health information. Where individuals are referenced, organizations are encouraged to use codes or initials, and sensitive sections are gated by permission.
What we ask organizations to avoid
Patient names, diagnoses, medication details, addresses, dates of birth, phone numbers or other protected health information should not be entered into workforce records.
Marketing site data
Demo requests collect only the business contact details you choose to provide. The interactive product demo uses synthetic sample data and is never connected to a live organization's records.
Compliance responsibility.
PHC Staff Hub is designed with HIPAA-conscious principles, and we do not claim certification on this page. Production use involving protected health information requires an organization's own compliance review, appropriate agreements and configuration. We are glad to walk your team through the details.