Skip to main content
The Security & Privacy Settings page is where Admin users configure practice-wide security, patient data sharing, and privacy controls. This article summarizes the settings available there and links to the detailed guide for each.

Who can access these settings

Only Admin users can view and edit Security & Privacy Settings. Go to Settings > Security & Privacy to open the page. For more on which settings are Admin-only, see User Accounts Guide — Administrative privileges.

Settings on this page

Multi-Factor Authentication

Require a second authentication factor (authenticator app, SMS, or email code) for users signing in to your practice’s Elation account. Admins enable MFA at the practice level, and each user then sets up their own factors. See Multi-Factor Authentication Introduction for setup instructions and supported factors.

Patient Data Sharing with Outside Care (Carequality)

Opt your practice in to Carequality so you can securely query and share patient records with other networks and EHRs via the Outside Care workflow. Toggling this on requires agreeing to the compliance terms. See Elation-Carequality Integration Introduction for details.

RxInform prescription reminders

Enable RxInform, a free service that sends prescription reminders to patients on your practice’s behalf. Patients can opt out at any time, and clinicians or staff can manage opt-outs per patient in demographics or per prescription. See RxInform prescription reminders for patients for the enablement steps and workflow.

Sensitive chart access rules (Premium)

Premium EHR Users can separately configure how Elation handles unauthorized access to sensitive charts, choosing between a warning and a hard block for:
  • Patient Cohorts — restrict charts by patient criteria such as age or tag.
  • VIP charts — restrict individual charts marked as VIP.
See Patient Chart Guide — Restricting access to patient charts based on patient criteria and Patient Chart Guide — Marking charts as VIP for restricting access (Premium).

Sticky Notes (Demographics Notes)

The text in a sticky note is the content of the patient’s Notes field in Notes & Chart Management in demographics. The Sticky Notes (Demographics Notes) card has three toggles. Sticky Notes (Demographics Notes) settings card with three toggles: Show sticky note icon turned on, and Share sticky notes with outside providers and Include sticky notes on printed demographics turned off. Show sticky note icon (default: Off) — when on, a sticky note icon appears next to the patient’s name on the Clinical Profile, the appointment form, and calendar appointment popovers for all users in your practice. The icon turns yellow when the patient has a note, and clicking it opens the Notes field. Turning this off only hides the icon. The text in patients’ Notes fields is not erased or changed, and the icon returns with the same notes if you turn the setting back on. See Patient Demographics Guide — Sticky Note icon. Share sticky notes with outside providers (default: On):
  • On — when a provider-facing letter or printout includes a demographics page, the Notes field from demographics (the sticky note) is shared on it.
  • Off — the Notes field from demographics is not shared on provider-facing letters and printouts that include a demographics page. Letters or printouts that do not include a demographics page are unaffected. Turn this off if you use sticky notes for internal staff reminders.
The setting applies only to provider-facing output. It does not change these behaviors:
  • Patient-facing letters always exclude the sticky note.
  • Printing demographics from a patient’s chart follows the Include sticky notes on printed demographics setting below.
  • EHI exports and patient record exports always include the sticky note, because those are the patient’s complete record.
Include sticky notes on printed demographics (default: On):
  • On — the Notes field from demographics (the sticky note) prints on the demographics page you print from a patient’s Demographics dialog (Print or Print & Close).
  • Off — the sticky note is left off that printout. Turn this off if you give the printout to patients and don’t want them to see internal staff reminders.
This setting does not affect letters or referrals, which follow Share sticky notes with outside providers.