Cortico keeps 3 Types of audit records in order to meet OTN Virtual Visit requirements.

  1. Records of Virtual Visits - the overall medical appointment itself
  2. Records of Events where users join the visit or patient uploads a file prior to visit.
  3. Records of Login Attempts (Security Logs)

Records of Virtual Visit

To generate an audit report of virtual visits, the Cortico team (security@cortico.health) will provide an OSCAR report template so you can generate this report within 2 business days of your request, or copy the one below. Please modify the report to include your clinic name instead of "Test Clinic".

You can run this report in OSCAR to access the required audit data.

-- 
SELECT appointment_no as event_id, "Test Clinic" as organization_id, "Cortico" as solution_id,
 appointment_date as event_start_date, appointment_date as event_end_date, start_time, 
end_time, "Clinical – Direct" as event_type, provider.first_name, provider.last_name, 
provider_type as physician_flag, provider.address, demographic.postal, "Clinical – Direct" as modality_used
 from appointment left join provider on appointment.provider_no = provider.provider_no
left join demographic on appointment.demographic_no = demographic.demographic_no
where appointment.demographic_no > 0 order by appointment_date desc LIMIT 100;

Record of Events

To receive the records of events associated with virtual visits such as file uploads, make a request to security@cortico.health along with the details (time period required, list of providers and any other filtering). Cortico will endeavour to deliver the records within 2 business days.

Record of Login Attempts

Make a request to security@cortico.health to receive failed and successful logins. Please specify the time period you wish to view events for.