MediSign

The typical implementation process for MediSign software:

• Sign Up and Free Trial: Users register online with just an email and instantly receive access to the full features for a 30-day free trial—no credit card required.

• Immediate Cloud Access: The platform is fully cloud-based, requiring no software installation. Users can log in from any PC, tablet, or smartphone after signing up.

• Basic Configuration: Practitioners can quickly configure clinic details, add providers, and adjust preferences directly in the web application interface.

• Bulk Data Import : If a practice has existing patient demographic lists, MediSign’s support team can assist with bulk import for seamless transition.

• Begin Using All Features: Clinics can instantly start adding patients, scheduling, billing, and using all features with minimal or no learning curve due to the intuitive design.

• Dedicated Support: Direct customer support is available throughout onboarding and ongoing use, ensuring any questions or issues are resolved quickly.

MediSign offers several customization options to help fit its software to specific business needs, especially in documentation and terminology. The platform enables practitioners to tailor certain aspects of the EHR and practice management workflow, although highly complex or API-driven customization is limited.

• Users can create tailor-made patient notes, allowing for customized clinical documentation templates to match specialty requirements and preferred workflows.

• The system features an extensive library of diseases, symptoms, medications, and laboratory exams, which can be customized by adding or modifying terminology for specific clinical contexts. Each custom term becomes part of the user’s ongoing database for documentation and billing.

• Medical professionals can define their own services and set custom prices in the billing section, adapting the invoicing tools to fit unique schedules of fees or reimbursement models.

• Flexible attachments support enables clinics to upload any kind of document or image to patient records, allowing for adaptable record-keeping, including lab results, referral letters, or custom forms.

• Scheduling modules are configurable with appointments per provider and examination area, giving clinics control over calendar organization to reflect actual practice structure.

• The reporting engine generates dynamic reports, supporting custom searches and exports based on clinic-specific data needs.

• Customization of workflow preferences, planner views (day/week/month), and creation of contacts and appointment types is supported directly within the app interface.

MediSign is designed for cost transparency, offering its core cloud EHR and practice management suite with minimal additional fees. The main costs are:

• No Setup Fees: There are no setup or installation charges—the platform is accessed instantly via the web, and account creation is free.

• No Maintenance or Upgrade Charges: All software maintenance, security, and feature upgrades are included in the standard subscription at no extra cost. Clinics never pay for updates or background support.

• No Support Charges: Dedicated support (email, chat) is included with every subscription, with no per-incident costs or support contracts required.

• No Long-Term Contracts: The subscription operates on a flexible, monthly “pay as you go” policy, with the first month free and cancellation possible at any time.

• Additional Users/Storage: For practices requiring more than the basic plan, extra users (maximum 10) or added storage cost just $1 per month per user and $1 per additional GB, keeping expansion affordable.

• No Hidden Fees: The advertised rates are final, with no VAT surcharges or unexpected charges for core services.

MediSign offers dedicated support and a robust set of training resources to onboard new users efficiently and help them become productive quickly.

Training Resources

• MediSign provides a library of instructional videos covering core tasks such as adding new patients, user management, scheduling appointments, tracking statistics, managing patient history, handling sample encounters, and issuing invoices.

• These videos are accessible from the MediSign website, and additional training content is available on their YouTube channel, allowing users to learn at their own pace.

• New users also benefit from a free 30-day trial with full access to all features, giving them hands-on experience with the software.

Dedicated Support

• MediSign emphasizes its commitment to "dedicated support," making assistance available whenever users need help or have questions about the platform.

• The support team actively responds to feedback, shaping future updates and helping users resolve issues during and after onboarding.

• All users can reach out for help through designated support channels with no ongoing contract obligations, ensuring accessible and responsive customer service.

Onboarding and Transition

• The onboarding process is streamlined, requiring no software installation or special equipment; users only need an internet connection and can access the platform from any device.

• MediSign’s flexible subscription model allows users to start, pause, or cancel service as needed, including seamless access to their data for transition or training purposes.

MediSign implements a set of modern security measures to protect user and patient data, focusing on both technical safeguards and compliance with regulatory standards.

Core Security Features

• Strong Password Policies: User registrations require strong passwords, with suggestions provided by MediSign to enhance account security.

• Automated Security Updates: All servers receive automated, rapid security updates managed by Ansible, minimizing human intervention and vulnerabilities.

• SSL Encryption: All internet transmissions are protected using SSL (Secure Sockets Layer), ensuring secure data transfer between users and servers.

• AES-256 Encryption: All files are both transferred and stored encrypted with the powerful AES-256 standard, safeguarding data at rest and in transit.

• Amazon S3 Storage: Files are securely stored using Amazon S3, a globally recognized and robust storage solution.

Data Access and Backup Integrity

• No Developer Access: MediSign’s production data is inaccessible to development personnel. Developers work exclusively on test servers using virtual data, minimizing the risk of unauthorized access.

• Distributed Backups: Redundant data storage occurs in at least two geographically separated data centers to ensure availability and recovery in case of disasters.

Payment Security

• No Credit Card Storage: MediSign does not retain any credit card or payment card details; all transactions take place securely via Stripe.

Compliance and Data Governance

• Regulatory Compliance: MediSign complies with the UK’s Data Protection Act 2018 and the Personal Data Protection Act (PDPA). This includes:

  • Encryption and access controls

  • Regular security audits

  • Timely response plans for data breaches

  • Appointment of a Data Protection Officer overseeing data protection practices

• User Control: Users retain rights to access, rectify, erase, restrict processing, object, and export their data, supporting transparency and user-driven data management.

Ongoing Security Improvement

• Continuous Training: Staff receive ongoing training in data protection principles and legal obligations, contributing to a culture of privacy and awareness.

• Impact Assessments: Routine Data Protection Impact Assessments (DPIAs) are conducted for high-risk activities, proactively identifying and mitigating security threats.

MediSign releases updates on a consistent, ongoing basis, with notable enhancements and fixes tracked in a public changelog. Updates typically occur several times per year and include both new features and security improvements.

Update Frequency

• The changelog records significant updates, showing at least 2-4 meaningful software releases annually in recent years, with each release focused on adding features like new billing options, appointment management, and security enhancements.

• Security and functionality improvements are stated to be “constant,” indicating that the platform is proactively maintained and iteratively improved.

Update Management Process

• Updates are logged and communicated to users through a transparent changelog, detailing the release date, version, and a description of each change.

• Security updates are handled with high priority, and the platform’s architecture enables updates without user intervention or the need for local installation, thanks to its cloud-based model.

• Users always operate on the latest version, benefiting from improvements and new features as soon as they are deployed.

MediSign’s policy explicitly grants users full control over their data, supporting both data ownership and data portability in compliance with leading regulations like GDPR and the UK Data Protection Act 2018.

Data Ownership

• User Rights: Users maintain ownership and control over all personal and practice-related data entered into MediSign, with clear rights to access, correct, or delete their data at any time.
• Transparency: Data processing and management activities are clearly communicated through privacy policies, promoting transparency and user trust.
• No Vendor Lock-In: Upon cancellation, MediSign allows users to take all their data with them, ensuring there is no lock-in or loss of ownership when ending a subscription.

Data Portability

• Portability Guarantee: MediSign guarantees user data can be exported in a structured, commonly used, and machine-readable format upon request, satisfying GDPR and Data Protection Act requirements for data portability.
• Data Export Process: Users can request data transfer to another organization or system, empowering practices to migrate or back up their records with minimal friction.
• Rights Enforcement: Users can exercise their right to data portability in addition to other GDPR rights (access, rectification, erasure, restriction, and objection).

Regulatory Compliance

• MediSign’s approach aligns with leading international data governance standards (GDPR, UK DPA, PDPA), reinforcing that users—not the vendor—maintain fundamental rights and practical control over their health and business data.

MediSign offers a flexible scaling model, allowing organizations to adjust their usage in line with changing needs by adding or removing users and storage with simple, transparent pricing.

Scaling Up

• Add Users: Additional users can be added at any time for a fee of $1.00/month per user, up to a maximum of 10 users under the standard plan.

• Increase Storage: If more storage is needed, extra storage can be purchased at $1.00/month per additional GB.

• Instant Effect: Once requested, changes to user count or storage are applied immediately, and organizations only pay for the resources actually in use.

Scaling Down

• Remove Users or Storage: Users or storage can be reduced easily at any time, immediately lowering subscription costs starting with the next billing cycle.

• No Penalties: There are no penalties, lock-ins, or administrative barriers to scaling down. Reduction requests are handled seamlessly in the subscription interface.

Pay-As-You-Go Structure

• MediSign follows a “pay as you go” policy: clients pay monthly based on actual usage, and may freely scale services up or down in response to organizational or business changes.

MediSign offers a highly flexible, user-centric contract structure, emphasizing immediate cancellation rights and simple terms for renewal and service continuity.

Contract Renewal Terms

• No Long-Term Contract: MediSign operates on a pay-as-you-go monthly subscription model. There are no binding long-term agreements—subscriptions continue on a rolling basis and renew automatically with each month’s payment.

• Automatic Renewal: Service access and renewals occur automatically as long as monthly payments are made. Users must maintain a valid payment method; missed payments result in termination after reasonable notice via email.

Cancellation Policy

• Immediate Cancellation: Subscribers can terminate their subscription at any time, instantly, and without any compensation or penalty. MediSign enforces a strict no-lock-in, cancel-anytime policy.

• Data Handling After Cancellation: Before finalizing cancellation, users are able to download their data. Once a subscription is terminated, all user-entered data is deleted from the platform.

• No Refunds for Current Month: Payments already made for the current month are non-refundable, but no further charges are incurred after cancellation.

• No Administrative Barriers: There are no required notices, waiting periods, or retention penalties—users control their subscription duration fully.

• Provider-Initiated Termination: MediSign reserves the right to terminate a subscription if service terms are violated, if required fees are not paid, or if third-party rights are threatened.

• Service Continuity: Service only persists while payment is active. Notifications are sent via email if payments are missed, ensuring clear communication about account status.

MediSign is compliant with major international data protection standards and regulations, built for broad adoption by healthcare providers in multiple English-speaking countries.

Core Compliance Standards

• GDPR (General Data Protection Regulation): MediSign is fully compliant with GDPR requirements, including transparent data processing, user consent management, subject rights (access, rectification, erasure, portability, objection), and robust breach notification protocols.

• UK Data Protection Act 2018: MediSign meets the principles of the UK Data Protection Act 2018, including lawfulness, purpose limitation, data minimization, security controls, and data subject empowerment through rights to access, correct, delete, and port data.

• PDPA (Personal Data Protection Act): The platform complies with the PDPA for applicable countries, implementing a dedicated Data Protection Officer, regular DPIAs (Data Protection Impact Assessments), and explicit user consent practices.

International Coverage

MediSign also aligns with data privacy acts and EHR-related data protection regulations for:

• Canada: PIPEDA and relevant provincial statutes

• Australia, New Zealand, Ireland, Cyprus, South Africa: Countries with similar baseline data protection/health privacy regulations

• Philippines, India, Singapore, Jamaica, Barbados, Trinidad and Tobago: Data Privacy Act or Data Protection Act equivalents.

Certification and Practices

• ICO Registration: MediSign is registered with the UK Information Commissioner’s Office (ICO), providing regulatory oversight and accountability for UK and international users.

• Industry Best Practices: MediSign applies technical safeguards—encryption, access control, security assessments—for all users and conducts due diligence with third-party service providers.

HIPAA Status

• Not Currently Certified for HIPAA: MediSign does not claim formal HIPAA certification but uses compatible tools and frameworks for security and privacy where HIPAA-like practices are needed (e.g., for US-based clients).