How MedRamp handles your facility's data

By design, MedRamp never asks for or stores patient health information. Nurses use it for logistics and orientation questions (badges, parking, crash cart location, unit-specific workflow) only. Patient names, MRNs, and clinical data are out of scope for the product.

Each facility's questions, answers, and documents are walled off from every other facility. A coordinator at one hospital cannot see, search, or query another hospital's data. Isolation is enforced in the database, not just in the UI.

Any facility can request a full export of its MedRamp data at any time, in a machine-readable format (CSV or JSON), at no cost. We deliver the export within 5 business days.

When a facility asks us to delete its data, we complete deletion within 24 hours and confirm in writing. This covers questions, answers, uploaded documents, and audit history for that facility.

The MedRamp chat assistant is clearly labeled as an AI assistant. It answers using your facility's approved knowledge base and provides source documents where available. Nurses should still follow unit policies and verify safety-critical information with on-site staff.

We are targeting SOC 2 Type I audit completion by the end of our first paid pilot. We are not currently SOC 2 certified. We would rather tell you this honestly than display a badge we haven't earned. This page will update when the audit is complete.