Security & Privacy
A description of what's actually implemented today — not a marketing claim of full compliance. Where something is in progress rather than complete, we say so.
Multi-factor authentication
Required for privileged administrative accounts (platform and payer administrators), enforced before any other action.
Role-based access control
Every user role is scoped to the organization, provider, or patient data it's authorized to see — reviewed endpoint by endpoint.
Audit logs
Security-relevant actions — logins, administrative changes, MFA events — are recorded with who did what and when.
Encryption
Data is encrypted in transit (TLS) between users and the platform. Sensitive credentials, such as multi-factor authentication secrets, are additionally encrypted at rest.
Consent management
Terms of Service and Privacy Policy acceptance is recorded per account, versioned to the policy in effect at the time.
Administrative controls
Sensitive actions — creating administrative users, forcing a session logout, disabling multi-factor authentication — require a fresh authentication step, not just a standing login.
Healthcare Compliance Posture
ATUUNE is built to support outpatient behavioral health workflows. Our hosting infrastructure (database and application hosting) supports upgrading to a Business Associate Agreement ("BAA")-eligible tier — this upgrade has not yet been enabled. Where a BAA is required for a given customer relationship, it can be executed separately, contingent on that infrastructure upgrade being completed first. Providers and organizations using ATUUNE remain responsible for their own compliance with applicable healthcare laws and professional obligations.
Integrations
ATUUNE is designed to work alongside the systems you already use — not replace them.
Calendar syncAvailable today
Syncs with the calendar you already use via a secure iCal (ICS) feed — compatible with Google Calendar, Outlook, and Apple Calendar through their standard calendar-sharing export.
EHRRoadmap
Direct EHR integration is on our roadmap and not yet available.
Practice ManagementRoadmap
Direct practice management system integration is on our roadmap and not yet available.
ClaimsRoadmap
Claims data integration is on our roadmap and not yet available.
Provider DirectoriesRoadmap
Direct provider directory integration is on our roadmap and not yet available.