FrameShare
|
 |
| |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
Announcements and updates from the FrameShare team
|
|
| |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
| |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
New floating window for therapists to track participant activity in real-time.
Helps therapists identify who is actively participating and who may need encouragement.
You can now rename participants in quick sessions for better organization and identification.
Video window now shows up to 16 participants (4x4 grid) before pagination. Previously limited to 9 participants (3x3).
Build and maintain your own curated library of images to reuse across sessions.
New emotion check-in button in the top toolbar allows participants to select their current emotional state during sessions.
Therapists can now take private notes during sessions using the notes button in the bottom-right corner.
We are happy to share what we have built so far with the community and look forward to any therapist interesting to try us out. You can sign up directly and start using or contact us at support@frameshare.org to get a personal intro and tour of FrameShare (from Stefan, himself!) and how we hope to add to your practice and workflow.
FrameShare implements comprehensive security measures that meet and exceed HIPAA Security Rule requirements. Here's how we protect your clients' Protected Health Information (PHI):
Drawings, chat messages, and session notes are NEVER shared or visible to anyone except the therapist and their authorized patients. Each session is completely isolated.
Unlike other platforms that use third-party services (Zoom, Google Meet, etc.), we host all video sessions on our own secure servers. Your therapy sessions never leave our HIPAA-compliant infrastructure.
Even FrameShare's administrators cannot view your encrypted session content, messages, or patient data. Only you and your authorized patients have access.
Every access to PHI is tracked: WHO accessed WHAT, WHEN, and from WHERE. Audit logs are immutable and include all creates, reads, updates, and deletes.
Sessions automatically expire after 30 minutes of inactivity, preventing unauthorized access from unattended devices.
Accounts are locked for 10 minutes after 5 failed login attempts, protecting against brute force attacks. IP-based tracking identifies suspicious access patterns.
All sensitive data is encrypted using AES-128 encryption (Fernet). This includes patient profiles, session notes, messages, and drawing data - both in transit and at rest.
SHA-256 checksums verify data hasn't been tampered with. Any unauthorized modifications are immediately detectable.
Full history tracking allows recovery of any accidentally deleted or modified data. Every change is versioned with timestamps and user attribution.
All data transmission uses HTTPS/TLS encryption. AWS infrastructure provides additional security layers with VPC isolation and security groups.
PHI is never permanently deleted immediately. Deleted records are retained and can be restored if needed, preventing accidental data loss.
Therapists can only access their own clients' data. Staff have restricted access based on their role. All access is logged and auditable.
Therapist locations shown only at state level. Anonymous visitor tracking respects privacy. Patient data is segregated and encrypted.
No artwork, chat messages, or session notes are ever shared without explicit consent. Only the therapist who created the session and their authorized patients can access session data.
All video sessions are self-hosted on our secure servers. No third-party video services have access to your therapy sessions, ensuring complete privacy and HIPAA compliance.
All patient data, health records, and session content is encrypted and saved exclusively with the therapist's account. No other users, including platform administrators, can view this protected information.
Provides comprehensive, immutable audit trails for all PHI access and modifications.
Maintains complete version history of all records, enabling data recovery and change tracking.
Implements transparent field-level encryption using industry-standard AES-128 encryption.
Monitors and blocks suspicious login attempts, preventing unauthorized access.
Need more information about our HIPAA compliance?
Contact us at support@frameshare.org
We can provide our complete HIPAA compliance documentation, Business Associate Agreement (BAA), or schedule a security assessment review.
