Skip to main content

HIPAA Compliance at Momence

This article explains how HIPAA-related data is handled within Momence, specifically how SOAP notes are stored, who has access to them, and how they are treated in reporting.

M
Written by Makayla James
Updated today

What Parts of Momence Fall Under HIPAA Compliance?

At this time, Momence is not HIPAA compliant as a full platform.

Only specific features fall under HIPAA compliance requirements:

  • SOAP notes (within the Appointments app)

  • Customer Diagnoses

These features are designed for businesses operating in wellness, clinical, or medically-adjacent fields that require secure handling of protected health information (PHI).

Other areas of the platform — such as client profiles, attendance, bookings, payments, communications, regular notes, and intake forms — are not classified as HIPAA-covered data.

Note: Intake forms are not HIPAA compliant. They can be used for general wellness or client preference information, but should not be used to store medical PHI.

Access and Storage of SOAP Notes & Diagnoses

SOAP notes and diagnoses are:

  • Stored securely in a HIPAA-compliant environment

  • Visible only to staff members who have been granted explicit access by the host

  • Unavailable to Momence employees unless permission is specifically granted by the host for troubleshooting or compliance export purposes

All access is restricted and logged for security and accountability.

Support Handling and Exports

If a host requires a HIPAA-related export:

  • Only a limited, designated support team can initiate the export

  • Support staff does not view or read any SOAP or diagnosis content

  • Exported files are delivered directly to the host through a secure method

These processes ensure PHI remains protected at every stage.

Reporting and HIPAA Visibility

SOAP notes and diagnosis content do not appear in any Momence reports.

Reporting tools include only standard operational or business data. No PHI, SOAP note content, or diagnosis information is shown or summarized anywhere in reporting.

Need Additional Clarification?

If your organization requires more detailed documentation or has specific questions about HIPAA handling, please contact us at [email protected], and we will route your request to the appropriate team.

Did this answer your question?