Every answer names its policy.
The document, the page and the passage. A citation the checker cannot verify is flagged on the answer, never hidden.
Solutions
Healthcare administration and compliance
The policy, the evidence
and the accreditation file, in one place.
Answer the accreditation, the regulator and your own staff with the policy and the page attached.
What does the accreditation standard require us to audit and keep as evidence, and how often?
The accreditation standard MS-4: Medication Safety requires the following audits and evidence retention:
- Auditing Requirements: A sample of 30 patient charts must be audited for medication reconciliation every quarter .
- Evidence Retention: Audit results and medication incident reports must be kept for three years .
Additionally, the hospital is required to submit a summary of its quarterly audits to the accreditation body annually .
Note: This information is for guidance only. Please refer to official regulatory documentation for authoritative requirements.
Sources
Knowledge Desk · answer with citations · Product components, synthetic files
The answer
The surveyor's question, answered with the standard behind it.
Ask across the standards, the policies and the audit records. Each answer cites the document it came from, and says so when it cannot.
What survives the audit
Three things an assessor can check for themselves.
Every read is permitted, and logged.
A member sees only what they may see, in every answer and every run. The audit log shows who asked, and when.
The accreditation file carries its sources.
A workflow run records every document it read and holds for approval. The checklist leaves with its sources on record.
Today
The evidence is assembled by hand, every cycle.
One evidence base, and the file assembles from it.
By hand
TodayWith iQ Pulse
What changesBy hand
Accreditation by hand
Every cycle pulls administrators off operations to gather policies and the evidence behind them.
With iQ Pulse
Controls with their evidence
Each control carries an owner, a status and the evidence on file, with a memo that names the gaps.
By hand
Policies nobody can find
Hundreds of administrative policies across systems, and the answer sits in one paragraph of one of them.
With iQ Pulse
Cited answers
The document, the page and the passage behind every answer. An unverifiable citation is flagged, never hidden.
By hand
Requirements that keep moving
Regulator guidance, insurer requirements and internal policy each change on their own schedule.
With iQ Pulse
One answer, whoever asks
The same question returns the same answer, with the policy behind it.
The workflows
Three workflows, from the standard to the audit file.
Shipped workflows, run over the documents you choose, with an approval step before export.
Extract obligations
Over the standard, the regulation or the contract you select, with every source the run used on record.
Compliance DeskFind missing evidence
Over the evidence documents you select, before the assessor asks.
Compliance DeskPrepare audit checklist
Over the documents you select, held for approval and exported as a PDF.
Compliance DeskField capture
A check done on the ward, and everything the machine read from it.
On requestThe photograph stays exactly as it arrived, with its checksum; the extracted text carries a legibility figure that measures the text rather than a model's confidence, and the candidate fields wait for review. A person corrects what is wrong and decides; only that decision turns a capture into a record.
Every return, every office
Accreditation evidenceAdministrative policy lookupRegulatory reportingInsurer and payer requirementsIncident and complaint recordsSupplier and procurement reviewsBoard and committee packsPolicy change tracking
The Desks
The Desks healthcare teams reach for.
Before procurement asks
The five questions a healthcare purchase turns on.
- Do you have templates for our frameworks?
- The HIPAA Security Rule ships as a bundled template, with ISO 27001, SOC 2, GDPR and the NIST Cybersecurity Framework beside it. Any other control list imports from a spreadsheet.
- Where is our data hosted, and can it stay in our jurisdiction?
- Region-pinned storage for Enterprise customers is on the roadmap and not yet shipped. Ask where your data is hosted before you sign and we will answer in writing.
- Can it run on our own infrastructure?
- Enterprise plans can run in your own cloud or on-premise, by arrangement. Every other plan runs on the hosted service.
- Does it connect to our document system?
- Uploads on every plan. Google Drive from Starter, S3 and Google Drive on Pro, SharePoint and Confluence on Enterprise. The CFO Desk's accounting connectors come with Pro and Enterprise.
- What does procurement get?
- Security questionnaires, penetration test reports, SOC 2 documentation and other security artefacts on request, from one address. Encrypted at rest (AES-256) and in transit (TLS 1.3), hosted with a SOC 2 attested cloud provider.
Next step
Meet the next accreditation
with the evidence on file.
Bring the standard and the last assessor's request list. We will import the controls and run the workflows with you.
Security
Encrypted at rest (AES-256) and in transit (TLS 1.3), hosted with a SOC 2 attested cloud provider. Your data never trains a model.
Security page