The strongest way to protect sensitive data is to not hold it in the first place. CordialChart is de-identified by design, encrypted end to end, and scoped by role, so your program can document real clinical work without creating a privacy liability.
Charting is de-identified. Patient identifiers are never collected, so there is no protected health information in the system to be exposed, subpoenaed, or breached.
Every connection runs over HTTPS/TLS, and data is encrypted at rest. Nothing moves or sits in the clear.
Students, instructors, preceptors, coordinators, and program admins each see and do only what their role allows, and nothing more.
CordialChart is multi-tenant with strict isolation. Your program only ever sees its own students, charts, and reports.
In-app training videos play through signed, expiring links tied to a signed-in user, not public URLs that can be copied and passed around.
Messages are attributed to a named sender and never deleted. Preceptor signatures are locked to a named signer and a specific record, so they hold up under review.
You can export student records, charts, preceptor signatures, and accreditation reports at any time, in formats you can keep and hand to a site visitor. We do not sell program or student data. When a program closes out, records can be exported and then deleted on request. Because seats are purchased one time, there is no subscription holding your data hostage and nothing to cancel.
Student education records are visible only to the program staff whose role requires them. A preceptor sees the shift in front of them, not a student's whole file; a student sees their own record, not a classmate's.
The clinical documentation students build carries no patient identifiers, so a student's education record never becomes a container for someone else's protected health information.
Program administrators decide who is enrolled, who can see what, and when records are exported or removed. Messaging is attributed and retained, so there is a clear, reviewable trail.
CordialChart is built to support programs in meeting their FERPA and institutional obligations. This page describes product practices, not legal advice, and each institution remains responsible for its own compliance. For a security or data-processing review, contact [email protected].
Hosted on Cloudflare's global network, so the app loads fast wherever your sites are, with DDoS protection in front of it.
Program data is isolated per tenant and backed up, so a mistake in one program can never touch another, and records are recoverable.
All traffic is forced to HTTPS, and the app installs as a secure progressive web app that still works offline in the field.
Send your questionnaire, DPA, or IT checklist and we will walk your team through it.
Email [email protected]