Demonstration environment. Fictional organization, fictional vendors, synthetic data throughout. Changes you make stay in this browser only.
ParvinCorpVendor & BAA Register

Ridgeline Health Partners. Multi-specialty physician group, 6 sites, 14 providers.

Signed in as

Marisol Vance, Compliance Officer. Runs the register. Adds vendors, records BAAs and security evidence, and completes the annual reviews. Sees the audit trail.

Guided tourMenu
Step 10 of 12

Renee manages the East Region, so she sees only its three sites

Ridgeline has two legal entities: Ridgeline Medical Group, the clinical group with an East and a West region and six sites, and Ridgeline Management Services, the management company that runs billing, IT and payroll for all of them. Every vendor records which entity holds its contract and which sites it serves; a vendor with no sites listed serves every site.

Renee Alvarez is the East Region manager. She sees the vendors that serve Main Campus, Jefferson Park or Eastgate Family Care, and every vendor that serves all sites, like the EHR, the clearinghouse and the billing company. A vendor that only serves the West Region, such as Greyhawk Imaging Reads at Riverside Orthopedics, is not in her register, her findings, her reviews or her coverage report at all, and her printouts and downloads say they cover the East Region only.

Her scope only narrows what her role already allows. She is a practice manager, so she reads and changes nothing, and the audit trail is not shown to her. In the live system the database itself keeps other sites' vendors from her, for reads and for writes.

The Organization page lists the entities, regions and sites. Signed in as Marisol, it also shows who is limited to which part of the organization.

This signs you in as Renee Alvarez. A bar stays at the top of every screen so you can come straight back to this step.

Changed things while exploring? Resetting clears this browser's changes and restores the starting data.