Built for the most sensitive records there are.
Counseling referrals carry information that must be protected — court orders, treatment participation, insurance details, children's records. CasePilot is designed around one principle: everyone sees the minimum necessary for their role, and everything is logged.
How we protect people
Minimum-necessary by design
Referrers see status, not clinical notes. Access is deny-by-default and scoped by role, organization, program, and case — each account sees only what its job requires.
Not the clinical record
Detailed clinical documentation stays in the clinic's clinical system. Case Pilot holds only what's needed to intake, coordinate, document, and report.
Consent enforced
The system warns before, and blocks, any release outside an active authorization.
A complete audit trail
Every view, edit, upload, export, release, and payment is recorded and searchable.
Strong controls
MFA, encryption in transit and at rest, segregation of duties on payments, and controlled amendment — no silent overwrites.
Designed to support
HIPAA, 42 CFR Part 2 (substance-use records), and Utah privacy, minor-consent, and court-record requirements.
We claim certifications only once they're in place — this page describes what the platform is designed to support today, not audits or attestations we haven't completed.