Our roadmap.
No surprises

NHSN's personnel categories by its five outcomes, for everyone who worked at least one day from October 1 to March 31, with a line list behind every number and a pre-flight check of what to fix first. Downloads in the format of NHSN's own CSV import template for a single facility. It does not submit anything to NHSN: your facility enters or uploads the numbers under its own account.

Define a program once, and employees are enrolled automatically when a department, job title or other value on their record matches it. A due and overdue queue shows who needs what.

Protocol, fit factor, make, model and size held as structured records under 29 CFR 1910.134, with the annual due date tracked and a bulk entry screen for a fit-test day.

Audiograms by ear and frequency, with the standard threshold shift worked out on save, age-corrected, under 29 CFR 1910.95.

Each case linked to the incident it came from, with restrictions, light-duty assignment, target return date, clearing provider and clearance.

Subjective, objective, assessment and plan, written against any record, signed and optionally countersigned.

Follow-up draws scheduled automatically from the exposure date, on a schedule you can configure, with the source-patient detail on the same record.

A claim linked to its incident: claim number, carrier, status, indemnity and medical paid, reserve, and temporary disability days.

California and Washington obligations on top of the federal baseline, included in every plan and switched on automatically for the clinics they apply to.

The electronic submission file for OSHA's Injury Tracking Application, with a pre-flight check that names what to fix before you upload.

The copy of a 301 an authorized employee representative may be given, with the identifying details removed.

Everything recorded for one employee, on one screen, in date order.

Activate or deactivate many employees in one action instead of one record at a time.

Staff accounts can add a second step at sign-in with an authenticator app, with single-use recovery codes.

An employee import can be undone in full until anyone records anything against an imported employee.

Examinations, immunizations, incidents, exposures, treatments, conditions, leaves, vitals, credentials, work restrictions, lost time, root cause analyses, costs, payment sources, family members, record requests, check-ins. Every module follows the same pattern.

Annual log, summary, and per-incident report rendered in their legally-mandated layout. Ready to post by February 1 in one click.

Employees see their own health records, sign assigned documents, view appointments, and update their contact info without calling your employee health team.

Upload policies once, assign to any employee or group, and collect typed e-signatures via secure token links. No login required to sign.

Calendar per organization with the full lifecycle (scheduled → complete / canceled / no-show), plus automated and manual email reminders.

One platform serves multiple facilities, healthcare districts, or counties, with strict per-organization data isolation enforced at the database layer.

Super admin, organization administrator, manager, user, and employee roles with permissions enforced consistently across every screen.

Names, SSNs, dates of birth, addresses, and phone numbers encrypted in the database with AES-256. Sensitive fields masked by default in the UI.

Built for HIPAA-sensitive data from day one: encryption at rest, per-organization isolation, and audit logging on every health record.

Every read, change and export of a health record is logged with the user, the time and the IP address. Reviewable by administrators and exportable for surveys.

Absence, call-ins, conditions, demographics, examinations, immunizations, incidents, roster, and schedule reports, exportable to CSV, Excel, and PDF.

Privacy-case handling per 29 CFR 1904.29. Sensitive incident types stay confidential and are still reported accurately.

Full RCA with Joint Commission sentinel-event flag, action items, and follow-up tracking attached to every incident.

Days away, restricted days, workers' comp, and FMLA, captured per incident and rolled up to the OSHA 300 automatically.

Upload an Excel roster and preview every row, with per-row validation errors and duplicate detection, before confirming the import.

Flu shots, incident trend, and expiring credentials, refreshed in real time from the underlying records.

Bring 5+ years of historical employee health, incidents, immunizations, and credentials from any prior system.

In-product help so employees and staff can self-serve common questions without opening a support ticket.

Search encrypted employee names without decrypting the underlying field, using a privacy-preserving HMAC index.

87 fields that were free text are now curated lists (department, job title, work site, supervisor, examiner, clinic, and more), so one department stops arriving spelled four ways.

A working list of what is outstanding, distribution sheets by department or manager, and printed letters for employees with no email address.

Each organization writes the body of the messages we send on its behalf, rather than accepting a single system-wide template.

Two new reports: TB conversion rate, and an annual occupational-health summary with a column per month.

Dashboard coverage for tetanus and TB screening, alongside influenza.

Employees can answer a question at the point where they sign, and a misdirected assignment can be withdrawn.

Every import run is recorded, with the rows that failed kept and readable so they can be corrected and re-run.

Print everything, only the categories holding records, or a chosen set.

Link a record to the one it follows from, so a course of treatment or a repeat test reads as a single thread.