Your whole practice, under your own name — and no one, not even us, can read a record.
Datarecovery Health is a complete practice platform — scheduling, records, billing, telehealth, and a client portal — for any HIPAA-compliant practice. It runs on your own website, is built around the way your office already works, and is held under a patent-pending zero-knowledge model where every record is encrypted on your device and only your practice holds the keys.
The whole practice, under your name
No two practices are alike, so no two builds are either. We start from everything your office runs today, re-hung inside your own website, and tailor it to the way you actually work. Patients never see our name — to them, it is simply your practice.
Branded as yours
The portal lives on your website, with your logo, your colors, and your web address. Patients never see our name.
Built around your office
Your intake forms, note formats, treatment plans, and billing rules. You tell us how the practice runs, and we set it up that way.
Switch on your terms
We migrate your records in parallel while your current system keeps running. You cancel the old plan only when you are satisfied.
Yours alone to read
Records are encrypted on your device under our patent-pending zero-knowledge model. Only your practice holds the keys; we never see inside.
Everything you run today, in one system
These are the core modules every build starts with. Because every practice is unique in at least a few ways, we customize well beyond this baseline — the modules you need, configured for your specialty and your workflow, and more added as your practice grows.
Scheduling
Calendar sync, recurring visits, and email, text, and voice reminders that cut no-shows.
Intake & forms
Custom intake, assessments, and consents with e-signatures, completed before the visit.
Documentation
Notes, treatment plans, auto-scored measures, and supervisor sign-off, all tied to the chart.
Client portal
Booking, documents, and secure messaging, all under your name and on your domain.
Billing & claims
Real-time eligibility, primary and secondary claims, ERA posting, and superbills.
Payments
Card, FSA, and HSA, card on file, autopay, and online bill pay from the portal.
Telehealth you own
Browser-based encrypted video on your own domain, under your name, with nothing to install.
Document sharing
Families send files instantly, verified with a cell number or a passkey.
Telehealth that belongs to you
Your telehealth room lives on your own domain, under your own name, and runs in the browser — nothing for you or your patients to install, and no third party in the middle. The video is encrypted end to end and tied to the consent on record. It is part of your platform, not a link rented from another company, so the visit stays inside the practice your patients already know.
One connected path, from booking to paid
Every step records who did what and when, so the chart, the claim, and the audit log always agree.
Getting paid stops being a chore
Patients pay the way they expect to, and cards stay current without the phone calls.
Online bill pay on day one
Every patient can settle a balance from the portal by card, FSA, or HSA — no separate setup, no page that cannot take a payment.
Card on file and autopay
Store a card with the patient’s authorization and bill it on schedule, so recurring balances clear without chasing.
Checkout that keeps you clean
Hosted card fields keep card data off our systems entirely, so checkout is fast for the patient and simple for your books.
Security built into everything
Security is the foundation here, not a feature bolted on. Every record is protected by the same patent-pending zero-knowledge model, and every sign-in by modern authentication.
Patent-pending zero-knowledge storage
Records are encrypted on your device with AES-256-GCM, split into fragments, and spread across ten private nodes with five copies each. We hold no key and can read nothing.
Modern authentication
Two-factor authentication and device-bound passkeys on every account, with hardware security keys supported — no shared passwords, no shared accounts.
Least-privilege access
Only the staff whose duties require a record can open it, and you can grant or withdraw that access at any time.
Full audit trail
Every access, change, and export is logged to your practice’s encrypted audit log.
Encrypted end to end
Every record is encrypted at rest and in transit; only ciphertext ever travels.
United States only
Storage, backups, and support never leave the United States, meeting federal and state data-residency requirements.
We back up every record, and we can read none of them Patent pending
We route and protect encrypted fragments and never hold a key, so a record cannot be read, changed, disclosed, or surrendered in readable form by us. A compromise of our systems exposes no readable record — and under HIPAA and state breach-notification laws, encrypted data without the key is generally not a reportable breach.
Patent pending — U.S. Provisional Patent Application No. 64/151,607 (filed 2026).
Records that outlast anything
Keys are protected by several independent recovery paths, and no record is stored until those paths are enrolled and tested. Access continues through the events that would sink an ordinary vendor relationship.
A lost device
Access is enrolled on several devices and hardware keys; another one opens the records.
A provider leaves or retires
A named records custodian restores access, and continuity carries on.
The practice is sold
Records move to the new practice with versions, history, and audit intact.
We stop operating
A standalone reader opens your records from your own keys, with no vendor needed.
A machine or building is lost
Five copies of every fragment are spread across the nodes, so no record is lost.
A legal hold
Destruction stops until you release it, and nothing is erased without your sign-off.
For any HIPAA-compliant practice
Datarecovery Health is not tied to one specialty. The compliance engine applies the retention periods, records-access deadlines, parent and guardian rules, and disclosure requirements that fit your license and your state — from HIPAA’s federal baseline to the health-records and privacy laws of each state you practice in, and the rules of your profession. You tell us how your practice works; the platform holds you to the rules that govern it.
Recognized health organizations trust us with their data
For nearly three decades, hospitals, research foundations, and individual clinicians have trusted Datarecovery with records they could not afford to lose or expose, and that long track record is how many of them first came to know us and why they turned to us when it mattered most. Datarecovery Health brings that same care for confidentiality to a full practice platform.
We secured rescue workers’ medical records after September 11th
In the days following September 11th, the Living Heart Foundation in New York entrusted Datarecovery.com with rescue workers’ medical records, which we handled under HIPAA-compliant security throughout. Out of respect for the rescue effort, we provided our services free of charge.
The Living Heart Foundation, the NYPD, and the FDNY · November 2001. Read the full Living Heart Foundation story.
Let us stand up your practice on the platform
It starts with a short working session on how your office runs, a branded preview on your own domain to click through, and then migration in parallel — you switch only when you are satisfied. Every practice signs a Business Associate Agreement before a single record is stored, with each HIPAA safeguard assigned to one party in writing.
Datarecovery Health is developed and run by Datarecovery.com, Inc., 110 North Research Drive, Edwardsville, Illinois 62025. We do business in all fifty states; we are a business associate under HIPAA and comply with the medical-privacy and health-records laws of each state in which our customers practice.