It holds your patients and your money. It’s built to be trusted with both.
Rooted understands the most sensitive parts of your business. That understanding is protected by design — built for PHIPA compliance, with least-privilege access, per-person authorization and permissions you control.
Security that matches the sensitivity of the work.
Built for PHIPA compliance
Rooted is designed around Ontario’s Personal Health Information Protection Act and operates under a written agreement covering your patients’ health information.
Under a written agreement
Your practice’s information is used only to serve your practice, governed by the agreement between us — not repurposed for anyone else.
Encrypted throughout
Information is encrypted in transit and at rest with modern, audited cryptography. Nothing moves or sits in the clear.
Least-privilege access
Rooted accesses only what it needs to understand the business, through a scoped connection to your management system.
Authorization by person
Every authorized person has their own limits on what they may ask and see. Access is granted, and revoked, in one place.
Complete audit trail
Every question, action and delivery is recorded. You can see exactly what was asked, what was done, and for whom.
You decide who can ask, and what they may see.
As the owner, you hold the keys. Add an associate, a manager or your accountant, and set exactly what each of them is allowed to ask about and receive. Change or revoke any access instantly, from the web product.
Authorized people
- Full access
Dr. Jordan Ellis
Owner
- Own production & schedule
Dr. Amara Chen
Associate
- Operations & AR
Priya Nair
Office manager
- Month-end artifacts only
Maria Ruiz
Accountant
Just as important is what it will not do.
It doesn’t replace your systems
Rooted works alongside your practice-management system. Your software keeps running exactly as it does today — Rooted understands the business without taking it over.
It doesn’t act without authorization
It communicates and delivers work only to the people you approve, within the limits you set for each of them.
It doesn’t share your practice
What Rooted learns about your business stays yours, used to serve your practice and no one else’s.