Ensora Telehealth
By Ensora Health
The typical implementation process for the Ensora Telehealth platform:
Initial Consultation and Configuration: The practice defines its specific needs, and the Ensora team configures the software settings, including defining user roles, setting up fee schedules, customizing documentation templates (like clinical notes and treatment plans), and activating integrated features like payments and the telehealth module.
Data Migration and Setup: Legacy client data, including patient demographics, insurance information, and historical records, are transferred from the old system (or paper records) into the new Ensora platform. This requires data cleansing and verification to ensure accuracy.
Staff Training and Onboarding: Ensora offers tailored onboarding options (self-led, instructor-led, or hybrid). Staff receive role-based training on how to use all features, including scheduling virtual sessions, using the telehealth interface, and completing documentation and billing within the new workflow.
System Testing and Workflow Validation: The practice conducts thorough testing, often called User Acceptance Testing (UAT), to ensure all features—especially the integrated telehealth and billing—function correctly according to the new workflow. This step confirms HIPAA compliance and data exchange between modules.
Ensora Health platform, which includes the Ensora Telehealth functionality, offers a high degree of customization designed to fit specific business needs, particularly those of behavioral health, mental health, and ABA practices.
Ensora allows extensive tailoring across three core areas:
Clinical Documentation and Content:
Customizable Notes and Forms: Practices can create and utilize their own forms, progress notes, and intake documentation, moving beyond standard templates to fit unique clinical methodologies.
Customizable Treatment Plans: The system supports tailoring treatment plan structures, goals, and objectives to align with specific therapeutic requirements or payer standards.
Specialty-Specific Modules: Ensora offers distinct modules tailored for Mental Health, ABA Clinics, CCBHCs (Certified Community Behavioral Health Clinics), and Rehab Therapy (PT, OT, SLP), each with pre-configured workflows and specialized feature sets to suit discipline-specific needs.
Workflow, Access, and Operations:
Role-Based Access Controls: Administrators can define specific permissions and access levels for various staff roles (e.g., clinicians, billers, schedulers) to maintain data security and streamline individual task lists.
Multi-Location / Multi-Provider Support: The system is built for scalability and can be configured to manage workflows, scheduling, and billing across large enterprise organizations with multiple physical locations.
Client Experience and Financials:
Automated Reminder Customization: Practices can customize the format, timing, and communication channels (text, email, phone) of appointment reminders to maximize client engagement and reduce no-shows.
Client Portal Configuration: The client self-service portal is configurable, allowing patients to complete electronic intake forms, schedule appointments, and manage payments specific to the practice's rules.
Ensora Health provides a comprehensive and tiered education and support program to ensure new users, including those using the integrated Ensora Telehealth solution, can achieve mastery quickly and efficiently.
The training and support options include:
Customized Onboarding: Ensora offers flexible options for implementation, including self-led, instructor-led, or hybrid onboarding to best fit the team's size, learning preferences, and timeline for a smooth start.
Structured Courses: Training is organized in a tiered approach, starting with foundational courses that cover 5-7 core features to get users operational fast, and progressing to advanced courses that dive deeper into specific goals, pain points, and workflows.
Role-Based Focus: Training is designed to empower staff with the specific skills needed for their job, whether they are clinicians, billers, or administrators.
Ensora Training Hub: This centralized platform provides a variety of resources for self-paced learning, including:
Short-Form Courses: Focused training based on customer feedback for efficient learning.
Professional Services Team: Ensora offers hands-on guidance from expert consultants for optimal configuration and best practices, covering onboarding, training, workflow consultation, and ongoing assistance.
Continuous Learning: The platform offers ongoing learning opportunities, including focused workgroups or refresher courses, to support staff as the team and business needs evolve.
24/7 Tech Support: Ensora is committed to providing prompt support to handle technical issues quickly, ensuring therapists can focus on client care.
Ensora Health, including its Ensora Telehealth functionality, prioritizes security and data protection through a comprehensive framework that meets stringent healthcare compliance standards, such as HIPAA (Health Insurance Portability and Accountability Act) and is working with guidance from other frameworks like HITRUST and NIST.
Encryption In Transit and At Rest: Customer data is encrypted both when it is stored (at rest) and when it is being transmitted over the network (in transit). In some components, this may include industry-standard 4096-bit AES "bank-level" encryption.
Cloud Architecture Security: The system is optimized for secure public cloud operations, using cloud-native data storage and security mechanisms, such as virtual firewalls and Security Groups, to enforce network boundaries and restrict unauthorized access.
Mobile Security: For its cloud-based applications, Ensora implements meticulous design to secure mobile data. Protected Health Information (PHI) sent to the mobile device is encrypted on the device using centrally managed keys.
HIPAA and 42 CFR Part 2 Compliance: The platform is designed to meet the strict security and privacy standards required by these regulations, which govern mental health and substance use disorder treatment records.
Multi-Factor Authentication (MFA): This is available and often utilized for applications that handle Protected Health Information (PHI) to verify user identities and prevent unauthorized logins.
Single Sign-On (SSO): Offered to streamline access while maintaining strong authentication.
Least Privilege Approach: Access rights are strictly implemented to grant users only the most restrictive set of privileges necessary to perform their respective job functions (role-based access controls).
Policy Framework: Ensora operates under a full set of information security policies based on established frameworks like NIST, CSA, CIS, and HIPAA.
Vulnerability Management: Applications are built according to secure coding practices and containerized to minimize the threat posed by operating system vulnerabilities. Regular vulnerability assessments are performed.
Risk Assessment and Compliance Program: The company maintains a centralized internal Governance Risk and Compliance Program to monitor compliance assessments, track control deficiencies, and ensure timely remediation of any identified findings.
Audit Controls: Policies and procedures are in place for auditing and logging system security logs to record and examine activity.
Ensora Health appears to follow a rapid and frequent release cycle, publishing updates, bug fixes, and new features multiple times per month.
Here is a summary of how frequently updates are released and how they are managed:
Ensora releases product updates, improvements, and defect fixes on a highly frequent schedule, often resulting in multiple releases within a single month (e.g., in the search results, releases were noted on October 16th and October 22nd).
This frequent cadence ensures that new features are deployed quickly, and any identified defects or issues are addressed and corrected in a timely manner.
Ensora manages and communicates its updates through its central support and community portal:
Release Notes: All updates—including New Features & Improvements and Defect Fixes—are documented in official Release Notes published on the Ensora Experience Hub (their dedicated knowledge base and community site).
Scope of Updates: The notes detail changes across various components of the Ensora platform, which includes core services like:
Scheduling and Calendar functionalities.
Billing and Payment Processing features.
Ensora Health's policy on data ownership and portability is primarily defined in its legal agreements, which state that the customer (the healthcare provider or practice) owns the data.
Here is a breakdown of Ensora Health's (including its underlying platforms) policy on data ownership and portability:
Customer Data Ownership: Ensora Health's Master Subscription Terms and Conditions explicitly state that, as between the customer and Ensora Health, all right, title, and interest in the Customer Data belongs to and is retained solely by the customer.
Protected Health Information (PHI): Since Ensora Health operates as an Electronic Health Record (EHR) and Practice Management solution, it functions as a Business Associate under HIPAA. This means the healthcare provider (the Covered Entity) maintains ownership and control over the PHI, and Ensora is legally obligated to protect and manage it on its behalf, as detailed in the Business Associate Attachment (BAA).
While customers own their data, the mechanism for export depends on the type of data and the specific Ensora product being used.
Client List Data: Ensora platforms generally allow customers to export their complete client list (including active and archived clients) directly from the application's Export Data section.
Session Notes and Uploaded Documents: Bulk export of documents and session notes may not be an immediately available self-service option within the platform itself. It is recommended that customers reach out to Ensora Health to request a bulk export of this clinical data, which is within their rights as the clinic owner.
Alternatively, some users may manually export notes and documents by printing the notes history and downloading files on a per-client basis.
The terms for scaling Ensora Telehealth and related services are based on the specific product tier you subscribe to and can be managed directly by the customer.
Client-Tiered Subscriptions: For certain platforms under Ensora Health (like Ensora Mental Health, formerly TheraNest), pricing is based on a tiered number of Active Clients (e.g., 30, 40, 50, 80, 100, 150 clients, with increments of 50 clients thereafter).
Manual Management: You are responsible for upgrading or downgrading your subscription as your number of active clients changes. The system does not automatically change your plan when your client count increases or decreases.
Process for Change: You must have Organization Administrator Permissions and can make changes to your plan at any time through the Organization section of the platform.
Billing for Scaling: When you change your subscription plan mid-month (or mid-year for annual plans):
You are credited for any unused time on your previous plan.
You are charged a pro-rated amount for the remaining time on the new plan.
The Telehealth service is often managed separately as an add-on subscription.
You can easily add or remove staff from your Telehealth subscription as organizational needs change.
The staff member gains access to schedule Telehealth sessions immediately after they are added to the plan.
The terms and conditions for contract renewal and cancellation for Ensora Telehealth services, as governed by the Ensora Health Master Subscription Agreement and related policies, are structured around the following key points:
The Subscription Term, which is the initial length of the contract, is specified in your individual Order Form or Service Order.
Automatic Renewal: Contracts generally include an automatic renewal clause, where the subscription will renew for successive periods (often one year) unless either party provides written notice.
Notice to Prevent Renewal: To cancel the automatic renewal, the Subscriber must submit a written notice of non-renewal to Ensora Health at least 30 days before the end of the current Subscription Term.
Termination of the contract can occur under specific conditions:
Termination for Cause (Material Breach): Either Ensora Health or the Subscriber can terminate the Agreement if the other party commits a material breach of the contract. The party claiming the breach must provide written notice, and the breaching party is usually given a 30-day cure period to correct the issue.
Termination for Convenience by Company: Ensora Health reserves the right to terminate the Agreement (and all associated service orders) upon 30 calendar days' written notice to the Subscriber, even without a breach by the Subscriber.
Refunds: If Ensora Health terminates the contract for any reason other than the Subscriber's breach, the company is obligated to refund all paid but unused subscription fees.
Fees Due: If the Subscriber is the party who breaches the contract, they are typically required to pay all unpaid fees for the entire remaining term of the Order Forms.
Ensora Telehealth, as part of the broader Ensora Health platform, meets several critical compliance and security standards, which are paramount for healthcare technology.
The Ensora Health platform, including its telehealth service, complies with the following major standards and certifications:
HIPAA Compliance: The platform and its services, including the video conferencing feature, are designed to be HIPAA-compliant (Health Insurance Portability and Accountability Act). This is the mandatory U.S. federal law governing the security and privacy of Protected Health Information (PHI).
HITRUST Certification: Ensora Health maintains a HITRUST-certified infrastructure. HITRUST (Health Information Trust Alliance) provides a Common Security Framework (CSF) that integrates various security and privacy standards (including HIPAA, ISO, and NIST) into a comprehensive, certifiable framework. Achieving this certification demonstrates a robust and independently validated commitment to security and risk management.
