Regulated use — the lay reading

What it is

For a practitioner whose activity is covered by US HIPAA or subject to Ontario's PHIPA, the site records what each vendor's own pages state, feature by feature, and gives the project's reading of those statements in the method's five words: documented support, conditional, not established, not suitable for this use, not assessed.

What it is not

It is not a grade, a certification, legal advice, or an assessment of any agreement. A vendor's marketing words about the law are quoted as the vendor's words and never adopted. “Not assessed” means the assessment was not done; it is not a failure. A missing prerequisite is not offset by extra features or a security badge. The method requires a review of this method by a qualified privacy specialist before anything regulatory is treated as more than a lay reading; that review has not happened.

Two jurisdictions, nine features

First edition: US HIPAA-covered activity and Ontario PHIPA-subject activity. Each product page lists, under the lay-reading banner, what the vendor states about data entry, hosting, messages, notifications, attachments, video, exports, integrations and AI features, then the availability of a US business associate agreement and any statement about Canada or Ontario, hosting region included. Each line is “vendor states” with the paraphrased statement and its source, or “not stated”. Evidence for one feature never covers another. A record that does not yet carry these statements prints one line: “Regulatory features: not assessed”.

Current status of the 54 practitioner records

The context control on the practitioner list shows the same words beside each price; it never filters, sorts or colours.