Everything on this page is either shipped and in production today, or committed without a date. We update it the day a feature moves, not at the end of a release cycle.
Available today.
Examinations, immunizations, incidents, exposures, treatments, conditions, leaves, vitals, credentials, work restrictions, record requests, file attachments, medical surveillance, hearing conservation, return to work, clinical notes and workers’ compensation, one consistent pattern across every module.
Annual log, summary, and per-incident report rendered in their legally-mandated layout. Ready to post by February 1 in one click.
Employees see their own health records, sign assigned documents, view appointments, and update their contact info, without calling your OH team.
Upload policies once, assign to any employee or group, and collect typed e-signatures via secure token links. No login required to sign.
Calendar per organization with the full lifecycle (scheduled → complete / canceled / no-show), plus automated and manual email reminders.
One platform serves multiple facilities, healthcare districts, or counties, with strict per-organization data isolation enforced at the database layer.
Super admin, organization administrator, manager, user, and employee roles with permissions enforced consistently across every screen.
Names, SSNs, dates of birth, addresses, and phone numbers encrypted in the database with AES-256. Sensitive fields masked by default in the UI.
Built for HIPAA-sensitive data from day one: encryption at rest, per-organization isolation, and audit logging on every health record.
Every create, update, and delete recorded with user, IP, and timestamp. Reviewable by administrators and exportable for surveys.
Absence, call-ins, conditions, demographics, examinations, immunizations, incidents, roster, and schedule reports, exportable to CSV, Excel, and PDF.
Privacy-case handling per 29 CFR 1904.29, sensitive incident types stay confidential while still reporting accurately.
Full RCA with TJC sentinel-event flag, action items, and follow-up tracking attached to every incident.
Days away, restricted, workers' comp, FMLA, captured per incident and rolled up to the OSHA 300 automatically.
Upload an Excel roster and preview every row, with per-row validation errors and duplicate detection, before confirming the import.
Flu shots, incident trend, and expiring credentials, refreshed in real time from the underlying records.
Bring 5+ years of historical employee health, incidents, immunizations, and credentials from any prior system.
In-product help so employees and staff can self-serve common questions without opening a support ticket.
Search encrypted employee names without ever decrypting the underlying field, a privacy-preserving HMAC index.
87 fields that were free text are now curated lists (department, job title, work site, supervisor, examiner, clinic and more) so one department stops arriving spelled four ways.
A working list of what is genuinely outstanding, distribution sheets by department or manager, and printed letters for employees with no email address.
Each organization writes the body of the messages we send on its behalf, rather than accepting a single system-wide template.
Two new reports: TB conversion rate, and an annual occupational-health summary with a column per month.
Dashboard coverage for tetanus and TB screening, alongside influenza.
Employees can answer a question at the point where they sign, and a misdirected assignment can be withdrawn.
Every import run is recorded, with the rows that failed kept and readable so they can be corrected and re-run.
Print everything, only the categories holding records, or a chosen set.
Link a record to the one it follows from, so a course of treatment or a repeat test reads as a single thread.
Everything recorded for one employee, on one screen, without opening each category in turn.
Activate or deactivate many employees in one action instead of one record at a time.
Define a program once and have the right employees enrolled by role, exposure, or work site.
Fit-test results held as structured records against 29 CFR 1910.134.
Clearance, restrictions, and the steps between leave and a full return.
Subjective, objective, assessment, and plan captured in the clinical note itself.
Record which OSHA plan you operate under. The 300A names that agency and its own reporting deadlines — eight hours for a fatality, and in California eight for a hospitalization too, not twenty-four.
Audiogram results, standard threshold shift calculation, and program status under 29 CFR 1910.95.
What an injury cost, against the incident that caused it — carrier, indemnity, medical and reserve kept apart, with twelve months of incurred cost.
TOTP from any authenticator app, with single-use recovery codes. You turn it on, and nobody else can turn it off for you.
Choose which parts of the service appear in your sidebar. Nothing already recorded is removed by switching one off.
Committed, without a date attached.
Reproducing each state plan’s own published 300/300A layout. The data is identical everywhere — 29 CFR 1904 is the floor — so this is a form-rendering job, and each one needs that state’s published form as the source.
Every quarter we ship the most-requested customer feature, at no extra charge to the customer who asked for it. If your team needs something specific to win an internal sign-off, tell us before the deal closes. Most of the time we'll commit to it on your contract.
Planned work usually runs with a beta cohort first. Most "Planned" items can be moved up the queue when a customer asks at signing. Bring it up on your demo call. We'll be straight with you about what's possible.
