Based on the bespoke needs of your practise and its staff, we have two options available for the access of OpenEMR which are dependent upon your access.

OpenEMR Server only

The OpenEMR server provides a website that’s publicly accessible via the internet with the use of a customised URL. 
For added security to ensure only personnel who have been granted access can login to review patient data, both a login and extra security check is required through 2-Factor Authentication (2FA).

For ease of use, OpenEMR already integrates with the industry standard Google Authenticator for 2FA – for information on 2 factor authentication please click here – Two Factor Authentication

Both patients and staff can then access their records via the relevant web portals whose functionality are customised – while staff can add ongoing notes and schedule patientcare, patients can review personal details and sign off on procedures after discussions with their specialist.

OpenEMR with Secure environment

All data is kept away form staff’s local desktops as an extra enforced barrier of cybersecurity to keep it secure. They are instead provided with a remote session to access a virtual ‘PC’ using Microsoft Terminal Services (Remote Desktop Protocol). This means that staff who should have access to patient records use readily available software on their local workstation alongside a locked down and secure connection via a Virtual Private Network (VPN).

With this combination, staff members respectively log in with a username and password which would connect them to the hosted secure network through an encrypted tunnel where the data resides – this ensures there is no risk of external third parties with negative intentions to gain access to your connection and, more important, patient data. The tunnel is safe from attack and scrambles the view of the data so that hackers cannot read it. Once the tunnel is established, the remote desktop program is run, and a different username and password is used to log the staff member in.

This method only allows for staff to access with no public website, and patients are subsequently unable to login. However, with this option each staff member has their own login with customised permissions available to prevent access to other staff data.