For hospitals, clinics, and health tech companies
Deploy Digisight in healthcare environments without risk. Protected Health Information is automatically stripped at the ingest layer — before it reaches our database — for 35+ EHR and clinical applications. BAA included at no extra cost.
35+
PHI apps protected
BAA
included free
0
PHI stored ever
✓ 5 records ingested · 2 PHI records stripped · windowTitle + url = null for Epic, Cerner
Security & compliance standards
HIPAA
Health data privacy
SOC 2 Type II
Infrastructure security
TLS 1.3
Encrypted in transit
AES-256
Encrypted at rest
Four steps from zero to fully HIPAA-compliant deployment.
An admin reviews and accepts the Business Associate Agreement directly in the Settings page. Recorded with name, timestamp, and user ID.
A single toggle activates HIPAA mode for your entire organization. All subsequently ingested data is subject to PHI filtering immediately.
At the ingest layer, any activity record from a known EHR or healthcare app has its window title and URL suppressed before it touches the database.
You still see app name, duration, and productivity categorization. You just never see the patient-specific window content.
No procurement back-and-forth. Your admin reviews the full Business Associate Agreement directly in the Settings page, checks the acceptance box, and HIPAA mode unlocks immediately. The acceptance is recorded with name, timestamp, and user ID for your records.
BAA Accepted
Accepted by Dr. Sarah Kim · March 28, 2026
HIPAA mode
PHI stripped at ingest layer
Block PHI app window titles
Epic, Cerner, Cerner + 30 others
Block screenshots for PHI apps
No screenshots when EHR is focused
PHI filtering applied server-side. Data is never written to the database.
PHI filtering is applied automatically to all recognised EHR, EMR, pharmacy, and clinical apps. No manual configuration needed for the apps below.
Custom PHI patterns can be added via the App Classification Rules section in Settings.
HIPAA compliance is built into every layer — not bolted on after the fact.
Window titles and URLs from EHR/EMR apps are set to null before any database write. The data simply does not exist in our system.
All data is encrypted in transit and at rest. Our infrastructure is hosted in SOC 2-certified data centres.
A Business Associate Agreement is provided at no extra cost and accepted in-product. No procurement paperwork to exchange.
Every admin action — enabling HIPAA mode, changing settings, exporting data — is logged with timestamp and actor identity.
Digisight collects the minimum data needed for workforce analytics. No keystroke logging, no clipboard access, no app content.
Contractual commitment to notify your organisation within 60 days of discovery of any breach of unsecured PHI.
14-day free trial. Full HIPAA mode available from day one. BAA included. No card required.