Security and real-record readiness
Current access: fictional records only
The public trial accepts fictional records only. Do not upload patient records, including records with names removed.
Real-record access requires approved vendor agreements and hosting, infrastructure and recovery verification, applicable customer terms and business associate agreement acceptance, an accountable readiness review, and explicit enablement for your organization. Accepting an agreement or submitting a request alone does not open access.
Request real-record accessA request starts a conversation about your practice’s needs. It does not authorize patient uploads or commit to a launch date.
Before real-record access
Readiness work covers vendor agreements, customer contracting, infrastructure verification, access controls, recovery testing, and an accountable review. Product controls and agreement acceptance alone do not establish HIPAA compliance.
The application includes organization-scoped access, session controls, source-linked review, and an audit trail. Verification of the deployed service remains part of the release review.
Customer agreements
Approved customer terms and the business associate agreement will be available as a versioned package. An authorized organization owner must accept the applicable version as one requirement in the readiness review. Access also requires the other checks above and explicit organization enablement.
View published agreementsSecurity questions
Contact hello@lexamed.ai. Do not include patient information, medical records, passwords, or access tokens.