Skip to main content
The Security & Privacy Settings page is where Admin users configure practice-wide security, patient data sharing, and privacy controls. This article summarizes the settings available there and links to the detailed guide for each.

​
Who can access these settings

Only Admin users can view and edit Security & Privacy Settings. Go to Settings > Security & Privacy to open the page. For more on which settings are Admin-only, see User Accounts Guide — Administrative privileges.

​
Settings on this page

​
Multi-Factor Authentication

Require a second authentication factor (authenticator app, SMS, or email code) for users signing in to your practice’s Elation account. Admins enable MFA at the practice level, and each user then sets up their own factors. See Multi-Factor Authentication Introduction for setup instructions and supported factors.

​
Patient Data Sharing with Outside Care (Carequality)

Opt your practice in to Carequality so you can securely query and share patient records with other networks and EHRs via the Outside Care workflow. Toggling this on requires agreeing to the compliance terms. See Elation-Carequality Integration Introduction for details.

​
RxInform prescription reminders

Enable RxInform, a free service that sends prescription reminders to patients on your practice’s behalf. Patients can opt out at any time, and clinicians or staff can manage opt-outs per patient in demographics or per prescription. See RxInform prescription reminders for patients for the enablement steps and workflow.

​
Sensitive chart access rules (Premium)

Premium EHR Users can separately configure how Elation handles unauthorized access to sensitive charts, choosing between a warning and a hard block for:
  • Patient Cohorts — restrict charts by patient criteria such as age or tag.
  • VIP charts — restrict individual charts marked as VIP.
See Patient Chart Guide — Restricting access to patient charts based on patient criteria and Patient Chart Guide — Marking charts as VIP for restricting access (Premium).

​
Demographics Notes

Beta feature: The feature described in this section is part of a beta release and is only available to a select number of practices.
The Demographics Notes card has a single toggle: Share demographics notes with providers (default: On).
  • On — when a provider-facing letter or printout includes a demographics page, the patient Notes field from Notes & Chart Management is included on it.
  • Off — the Notes field is suppressed from provider-facing letters and printouts that include a demographics page. Letters or printouts that do not include a demographics page are unaffected.
The setting applies only to provider-facing output. It does not change these behaviors:
  • Patient-facing letters always exclude the Notes field.
  • Printing a patient’s own chart always includes the Notes field when the demographics page is part of the printout.
  • EHI exports and patient record exports always include the Notes field, because those are the patient’s complete record.