Security-conscious
credential tracking software
Track provider credentials with access controls, audit logging, and encryption. Request agreement review before processing regulated data; this service is built for provider metadata, not patient records.
No credit card required · Setup in 5 minutes · Cancel anytime
Credential data, secured like it matters
Request a Business Associate Agreement for review. Do not process PHI until the agreement and processor configuration are confirmed.
Data is encrypted in transit and at rest, access-controlled by role, and logged to an append-only audit trail.
Text paths scrub where applicable. Binary document analysis is disabled by default and is not represented as fully anonymized.
How credential data is protected
Built around access control, audit logging, and responsible AI — so sensitive provider identifiers stay protected.
Encryption in transit & at rest
All data is protected with TLS 1.2+ in transit and AES-256 encryption at rest, including provider credentials and uploaded documents.
Role-based access controls
Team members are scoped by role (member, coordinator, org admin, super admin) so only authorized users can view or edit sensitive provider identifiers.
Append-only audit logs
Every credential change, provider modification, and administrative action is recorded with timestamp, user, and action type.
Document-analysis consent boundary
Text paths use server-side scrubbing where applicable. Binary document analysis is disabled by default and requires current organization-owner consent; binary files are not represented as fully anonymized.
Agreement review path
Request a Business Associate Agreement for review before processing regulated data; the application does not make a compliance determination for your organization.
No patient records
The platform is built for provider credential metadata — patient health records and clinical notes must not be uploaded.
Security controls in minutes, not months
Simple setup for practice teams that need provider credentials tracked and audited.
Add your providers
Enter provider names and credentials in seconds, or bulk-import your existing roster from Excel.
Upload documents securely
Credentials and supporting files are stored encrypted, with access limited by role and every action logged.
Track, alert, and audit
Automated renewal reminders keep credentials current, and audit-ready reports prove compliance on demand.
Frequently asked questions
Do you sign Business Associate Agreements (BAAs)?
If your organization requires a BAA, request one for review before processing regulated data. The service is intended for provider credential metadata; do not upload patient records or PHI unless the required agreement and processor configuration are confirmed.
Is my data stored in the US?
CredVault application data is stored on AWS in the United States. Text-based AI paths use scrubbing where applicable. Optional binary document analysis is disabled by default, requires current owner consent, and may transmit identifiers to the configured document-analysis provider.
Can I delete my data?
Yes. Account deletion removes all provider and credential data, and CSV exports are available on request before deletion so you keep what you need.
What is a Business Associate Agreement (BAA)?
A BAA is the contract HIPAA requires between a covered entity and a business associate that handles protected health information. It defines permitted uses, safeguards, and breach obligations. Request one before processing regulated data.
How is credential data protected?
Credential data is encrypted in transit (TLS 1.2+) and at rest (AES-256), access-controlled by role, and logged to an append-only audit trail. Text paths use server-side scrubbing where applicable; binary document analysis is not represented as fully anonymized.
Can I upload patient records to CredVault?
No. The platform is built for provider credential metadata. Patient health records, clinical notes, treatment records, and payer files containing patient PHI must not be uploaded.
Security-conscious credential tracking for your practice.
Get access controls and audit logs from day one, with agreement review available before regulated use.
Start your free trial todayNo credit card · 14 days free · Cancel anytime