Licensing
Every state’s licensing
Kordera is not tied to one state’s rulebook. During setup you send us your state’s licensing requirements, or your agency’s own compliance checklist - a PDF is enough - and we build your survey-readiness checklist from it. From then on, every entry staff make is the evidence. You know your rule; Kordera proves you followed it.
- Your state’s requirements loaded during setup, from the PDF you already have
- Incident reports in the format your state accepts
- Required records kept, signed, and retrievable
- Reports for court, state, and the board
Accreditation
Joint Commission BHC alignment
A chart structured to the expectations of a Behavioral Health Care survey, so tracer prep is not a fire drill.
- Plan-of-care reviews tracked
- Tracer-ready chart
- Evidence assembled from daily work
Integrity
Audit-log integrity
Every PHI access and every change is signed, time-stamped, and tamper-evident.
- Integrity-checked audit log
- Signed, time-stamped entries
- Audit-logged PHI access
Security
Security posture
Modern access control and encryption, and every agency gets its own installation and database. See how we keep your data safe →
- HIPAA compliant, BAA available
- Encryption in transit and at rest
- WebAuthn / passkeys
- Your own installation and database
Monday, 9:05 a.m. - The surveyor picks a resident and asks to trace the record end to end. You open the chart. The face sheet, legal status, care team, plan-of-care reviews, med history, and incidents are one record, in order - not five systems and a binder.
9:40 a.m. - “Show me this medication refusal and who witnessed the pass.” It’s in the eMAR: signed, witnessed, time-stamped, with the refusal logged the moment it happened - not reconstructed last week for the survey.
11:15 a.m. - “Who has accessed this record?” The audit log answers - every view and every change, signed and time-stamped, in a log that is integrity-checked rather than editable.
Afternoon - Training files. Staff certifications, course completions, and expirations are already tracked with reminders, so nobody is chasing a CPR card through email.
None of this was prepared for the survey. It is the byproduct of daily work - which is the whole idea.
Is Kordera HIPAA compliant?
Yes. Kordera is HIPAA compliant, a Business Associate Agreement is available, and every PHI access is audit-logged. Every agency gets its own installation and its own database.
How does the audit log actually work?
Every entry and every PHI access is signed, time-stamped, and kept in an integrity-checked log - tamper-evident, not just a table someone can edit. When an auditor asks who touched a record and when, the answer is already written.
Does Kordera align with Joint Commission?
The chart is structured to Behavioral Health Care survey expectations - plan-of-care reviews tracked, evidence assembled from daily work, and a tracer-ready record - so tracer prep is not a fire drill.
Can surveyors or auditors be given their own access?
Records are retrievable and traceable end to end, and reports for court, state, and the board are built from daily work. How access is granted during a survey is configured to your policy during setup.
What does “single-tenant deployment” mean?
Your agency’s deployment is yours - not a shared database with every other customer. That is how every agency runs on Kordera, so your records are never stored alongside another agency's.
