EHR & Healthcare Glossary

Software that uses artificial intelligence to listen to patient-provider conversations and automatically generate structured clinical notes (SOAP, DAP, etc.). Reduces documentation time by up to 70% and lets clinicians focus on the patient instead of typing.

A chronological record of all actions taken within a system — who accessed what data, when, and what changes were made. Required for HIPAA compliance and essential for investigating security incidents or verifying clinical documentation integrity.

A legally binding contract between a healthcare provider (covered entity) and a vendor (business associate) that handles protected health information. Required by HIPAA before sharing any patient data with third-party services like EHR systems, cloud storage, or billing platforms.

When an insurance company refuses to pay for a submitted claim. Common reasons: incorrect codes, missing pre-authorization, patient not covered, timely filing exceeded. Denied claims can often be appealed with corrected information.

The standard paper claim form (also called HCFA-1500) used to bill Medicare, Medicaid, and most commercial insurance companies. Contains patient demographics, provider info, diagnosis codes, procedure codes, and charges. Most EHR systems generate this electronically.

A standardized set of 5-digit codes maintained by the AMA that describe medical procedures and services. Used on insurance claims to tell payers exactly what was done during a visit. Example: 99213 = established patient office visit, low complexity.

The process of verifying a healthcare provider's qualifications, licenses, certifications, and malpractice history to be accepted into an insurance company's network. Typically takes 60-120 days per payer. Required before you can bill insurance.

A streamlined clinical note format popular in therapy and counseling. Data: what was discussed or observed. Assessment: the therapist's clinical interpretation. Plan: next steps and homework. Simpler than SOAP for behavioral health settings.

A unique identifier assigned by the Drug Enforcement Administration to healthcare providers authorized to prescribe controlled substances. Required for ePrescribing controlled substances and must be registered in each state where the provider practices.

A digital version of a patient's complete medical history maintained by the healthcare provider. Includes demographics, progress notes, medications, vital signs, lab results, and imaging. Designed to be shared across authorized providers for coordinated care.

The process of confirming a patient's insurance coverage, benefits, copay amounts, and deductible status before their appointment. Prevents surprise billing and claim denials. Can be done electronically in real-time through EHR systems.

A digital version of a patient's chart within a single practice. Often used interchangeably with EHR, but technically an EMR stays within one organization while an EHR is designed for interoperability across multiple providers.

The ability to electronically prescribe Schedule II-V controlled substances (opioids, stimulants, benzodiazepines, etc.). Requires identity proofing, two-factor authentication, and a DEA-approved software system. Mandatory in most US states.

The electronic transmission of prescriptions directly from the provider's EHR to the patient's pharmacy. Eliminates handwritten prescriptions, reduces errors, checks for drug interactions, and speeds up the dispensing process.

The electronic version of an Explanation of Benefits (EOB) sent by insurance companies to providers. Shows which claims were paid, denied, or adjusted, and the exact payment amounts. Automates payment posting in EHR billing systems.

A digital signature used to sign clinical documents, consent forms, and intake paperwork electronically. Legally binding under the ESIGN Act and UETA. Eliminates paper forms and speeds up patient onboarding.

A modern standard for exchanging healthcare data electronically, developed by HL7. Uses RESTful APIs and JSON, making it developer-friendly. The foundation for most modern healthcare API platforms including ClinikAPI.

The European Union's data protection law that governs how personal data is collected, stored, and processed. Applies to any organization handling data of EU residents, including healthcare providers offering telehealth to EU patients.

A written estimate of expected charges for scheduled healthcare services, required by the No Surprises Act for uninsured or self-pay patients. Must be provided at least 1 business day before the appointment.

A US federal law that sets national standards for protecting sensitive patient health information. Any healthcare provider, health plan, or business associate handling protected health information (PHI) must comply with HIPAA's Privacy, Security, and Breach Notification Rules.

An international set of standards for the transfer of clinical and administrative health data between software applications. HL7 v2 is the most widely used healthcare messaging standard, though FHIR (HL7's newest standard) is rapidly replacing it.

A global coding system for diagnoses maintained by the WHO. Every insurance claim requires at least one ICD-10 code to justify medical necessity. Example: F32.1 = Major depressive disorder, single episode, moderate.

Paperwork (or digital forms) completed by patients before their first visit. Typically includes demographics, medical history, current medications, allergies, insurance information, consent forms, and HIPAA acknowledgment.

The ability of different healthcare IT systems to exchange, interpret, and use patient data seamlessly. Enabled by standards like FHIR and HL7. Critical for care coordination when patients see multiple providers.

A clinical approach that uses standardized assessments (PHQ-9, GAD-7, etc.) to track patient outcomes over time. Helps clinicians make data-driven treatment decisions and demonstrates treatment effectiveness to insurance companies.

A software architecture where a single instance of the application serves multiple organizations (tenants), with each tenant's data isolated from others. In ClinikEHR, each clinic is a tenant with its own patients, staff, and settings — all on the same platform.

When a patient fails to attend a scheduled appointment without canceling in advance. No-shows cost practices an average of $200 per missed slot. Automated reminders via SMS, email, and voice can reduce no-show rates by up to 40%.

A secure online platform where patients can access their medical records, view lab results, message their provider, schedule appointments, pay bills, and complete intake forms. Improves patient engagement and reduces phone calls.

A state-run electronic database that tracks controlled substance prescriptions. Providers must check the PDMP before prescribing controlled substances to identify potential misuse or doctor shopping. Most states mandate PDMP checks.

Any individually identifiable health information — including names, dates, medical records, lab results, and billing data — that is created, received, maintained, or transmitted by a covered entity. PHI must be encrypted and access-controlled under HIPAA.

Software that handles the administrative and financial operations of a healthcare practice — scheduling, billing, claims, reporting, and patient communication. Often integrated with or part of an EHR system.

Approval from an insurance company required before certain procedures, medications, or services can be provided. The provider must demonstrate medical necessity. Failure to obtain pre-auth can result in claim denial.

Documentation of a patient encounter that records the patient's current status, treatment provided, response to treatment, and plan going forward. Required for continuity of care and insurance reimbursement.

The entire financial process of a healthcare practice — from patient registration and insurance verification through charge capture, claim submission, payment posting, and collections. Efficient RCM reduces claim denials and accelerates cash flow.

A database security feature that restricts which rows a user can access in a table. In multi-tenant EHR systems like ClinikEHR, RLS ensures that each clinic can only see its own patient data — even though all clinics share the same database.

The most common clinical documentation format. Subjective: what the patient reports. Objective: measurable findings (vitals, exam results). Assessment: the clinician's diagnosis or clinical impression. Plan: treatment steps, prescriptions, follow-ups.

An itemized form listing the services provided during a patient visit, including CPT codes, ICD-10 codes, provider info, and charges. Patients use superbills to submit out-of-network claims to their insurance for reimbursement.

The delivery of healthcare services remotely using video conferencing, phone calls, or messaging. Includes live video consultations, store-and-forward (sending images/data for later review), and remote patient monitoring. Must be HIPAA-compliant.

A documented plan outlining the patient's diagnosis, treatment goals, interventions, and expected timeline. Often required by insurance companies for ongoing care authorization, especially in mental health and rehabilitation.

The process of assessing and prioritizing patients based on the severity of their condition. In a clinic setting, triage involves recording vital signs, chief complaint, and urgency level to determine the order in which patients are seen.

A widely-used library of evidence-based treatment plan templates for behavioral health. Includes pre-written goals, objectives, and interventions organized by diagnosis. Saves clinicians time while ensuring documentation meets insurance requirements.