Yes. BAA is included on Enterprise. Our standard template is reviewed by counsel and accommodates customer redlines.

How do you avoid ingesting ePHI?

Monitors capture response status, latency and metadata only. Response bodies aren't stored or logged. Custom body assertions are evaluated in-process and discarded.

Can you monitor Epic, Cerner, FHIR endpoints?

Yes — through HTTP/HTTPS probes against the endpoints you expose. Set latency and status thresholds per service and rely on the audit log for evidence.

Yes — self-hosted deployment is available on Enterprise. Same backend services as Docker images you run in your own environment.

Do you support HL7 / FHIR / DICOM monitoring and HITRUST mapping?

All three are on the active roadmap. Round-trip synthetic monitoring for HL7 v2, FHIR REST and DICOM endpoints, HITRUST CSF control mappings, and a hash-chained tamper-evident audit log aligned to §164.312(b) are in design. Today you can monitor any of these surfaces via HTTPS / TCP probes and rely on the existing audit log for evidence.

Healthcare

Monitoring for the systems patients depend on.

BAA available on Enterprise. Continuous monitoring of clinical endpoints, telehealth and integration APIs — with ePHI-safe defaults baked in.

Start free Request BAA

HIPAA

BAA on Enterprise

Metadata only

No ePHI in monitors

AES-256-GCM

Credentials at rest

Self-hosted

Available

By industry

What you get with AlertifyPro

Clinical endpoint monitoring

HTTP/HTTPS, TCP and DNS probes across your EHR APIs, integration endpoints and telehealth services. Custom alert rules on latency and status thresholds.

ePHI-safe by default

Monitors capture status, latency and metadata only. Response bodies aren't stored. Custom assertions are evaluated in-process and discarded — no ePHI in the database.

Audit log mapped to §164.312(b)

Every config and access event recorded with actor and target. Retention configurable on Enterprise to align with your HIPAA technical-safeguard documentation.

RBAC for clinical IT

Owner / admin / member roles, with custom RBAC available on Enterprise. Per-tenant scoping ensures multi-org IT teams never see another organisation's data.

Telehealth uptime alerts

Sub-minute detection on availability and latency of video, chat and queue services. Paged to the right team through 8 native channels.

BAA + evidence on request

BAA available on Enterprise. SOC 2 Type II report and DPA available through the security contact for annual risk reviews.

HL7 / FHIR / DICOM round-trip monitoringRoadmap

Synthetic round-trips through HL7 v2, FHIR REST and DICOM endpoints — measure end-to-end integration health, not just transport status.

HITRUST CSF certification mappingRoadmap

Control mappings to HITRUST CSF for healthcare customers who need it alongside HIPAA — exportable as evidence packs for assessor review.

Hash-chained audit log mapped to §164.312(b)Roadmap

Append-only audit log with hash-chaining for tamper evidence. Maps directly to HIPAA Technical Safeguards §164.312(b) audit-control requirements.

Built for the realities of clinical IT

Clinical systems can't tolerate the same noise tolerance as a consumer app. AlertifyPro reflects that: stricter alert routing, deeper integration checks and zero ePHI footprint.

HTTPS / TCP / DNS probes across clinical endpoints
Latency and status thresholds tuned per service
Heartbeats for batch jobs, ETLs and clinical pipelines
Maintenance windows aligned to change-control board
BAA + evidence on request
HL7 v2 / FHIR / DICOM round-trip synthetic monitoringRoadmap
HITRUST CSF control mappings exportable as evidenceRoadmap
Hash-chained tamper-evident audit log for §164.312(b)Roadmap

Clinical systems · live

09:12:01ehr-api · HTTPSok · 142ms p95

09:11:48interface-engine · TCPok · port 5050

09:10:55telehealth-portalok · 320ms p95

09:08:22etl-nightly · heartbeatok · 18m12s

Outcomes our customers see

0 ePHI

Stored or logged

Architectural — not policy. Monitors capture metadata only.

<60s

Clinical alert latency

Median detect-to-page across HTTPS probes.

Self-hosted

Available

Run the platform inside your environment for full residency control.

“Our prior tool kept pulling response bodies into logs — a recurring HIPAA risk we never fully solved. AlertifyPro's metadata-only model removed the problem at the source.”

Rachel K. — Director of Clinical IT, regional hospital network

Frequently asked

Ready to see it on your stack?

Spin up your first monitor in under a minute. Free forever for the first 5 services.

Start free See pricing