By role · Compliance officer
Everything you are responsible for lives in someone else's system.
Access records, consent documentation, training completion, credential files, incident logs. You are accountable for producing all of it on demand, and none of it is anywhere you control.
Producible on demand. Access reviews, consent records and audit packets are reports, not projects.
Your week
Six things that eat the time you don't have.
Unisona Health gives behavioral health compliance officers the records they must produce on demand in one place: a permission matrix by role and record section, an append-only activity log, 42 CFR Part 2 consent enforced on every export path, training and credential files, and one-click audit packets. Each is a report, not a project.
None of these are clinical problems. All of them are seams between systems that were never designed to know about each other.
Answering who can see what means asking IT and trusting the answer.
Without a searchable log, the first question after a breach takes weeks instead of hours.
Scoped disclosure that depends on a person remembering will fail on a busy day.
A system that does not know who works for you produces records you then reconcile by hand.
An expired supervision agreement is a licensing matter, and a monthly report finds it after the fact.
Three days of collating, and the gaps are discovered on the last one.
What changes
Each one, and where it lives.
- Access reviews
Permissions set per role and per record section, producible as a report for your annual review.
- Roles & permissions
- Investigations
An append-only log of every view, edit, export and permission change, searchable and exportable.
- Activity log
- Part 2 consent
Consent as a structured record, enforced on every export path rather than in a policy.
- 42 CFR Part 2
- Training records
Assignment by role with completion, scores and dates retained per staff member.
- Training library
- Credential files
Expirations tracked with escalation, and lapses that block scheduling rather than a report.
- Credentials & licensure
Questions you can finally answer
Four you are probably asked, and cannot answer today.
Filter the activity log by MRN and export the result — the same answer a patient has a right to request.
Activity logThe permission matrix is a report an administrator can produce during a survey, not a config file.
Roles & permissionsEvery release is logged against the consent that authorised it, with scope enforced at export.
42 CFR Part 2Licences, supervision agreements and payer enrollments with countdowns and enforced blocking.
CredentialsCase study
What this looks like in a real program.
Other roles
The same program, seen from the rest of the team.
By role
Owner / executive
Occupancy is in one head, denials in another, payroll in a system nobody logs into. Every question costs someone half a day, and the answer arrives stale.
See the week from this role →By role
Clinical director
Notes are late, some nearly identical, plan reviews are due, and two clinicians are carrying too much. None of it shows until it becomes a finding or a denial.
See the week from this role →By role
Billing manager
A third of your denial queue traces back to something that happened before the claim existed: an authorization nobody watched, a credential that lapsed.
See the week from this role →By role
Practice manager
Every gap between the scheduling tool, the EHR, the billing service and payroll is filled by someone retyping. Invisible, unbillable, most of the week.
See the week from this role →By role
Intake director
Someone in crisis calls several places. Whether they end up with you comes down to how fast you respond and whether you can say yes to a bed tonight.
See the week from this role →What you stop working around
The tools and moves this role usually owns.
Questions
Common questions.
What is the best EHR for a behavioral health compliance officer?
One where access, consent, training and credentials are records you can produce, not policies you hope were followed. Unisona Health writes every view, edit and export to an append-only log, enforces Part 2 consent on every export path, blocks scheduling on lapsed credentials, and compiles a records-request packet in one click.
Can we see who accessed a patient's record?
Yes. The activity log records every view, edit, signature, export, download and permission change with the user, timestamp and IP address. Filter by MRN, user, action or date range and export the result. Entries cannot be edited or deleted by anyone, including Unisona Health, and are retained for seven years.
How does Unisona Health handle 42 CFR Part 2 consent?
As a structured record the system enforces, not a policy staff must remember. Scoped consent can release, for example, a treatment summary while withholding progress notes, and it is enforced on exports, referrals, audit packets and API access. Expiration is honoured automatically, revocation takes effect immediately, and every disclosure is logged.
Can we produce an access review for an audit or survey?
Yes. Permissions are set per role across record sections as edit, view or none, and the permission matrix is a report an administrator produces on demand rather than a config file an engineer has to interpret. The same report serves an annual access review, an accreditation survey or a breach investigation.
What happens when a staff credential expires?
Scheduling and signing for that role are blocked until it is updated. Before that, expirations escalate: the staff member is notified 90 days out, the supervisor and HR dashboard at 60, and weekly reminders and the compliance report at 30. Licences, supervision agreements, background checks and payer enrollments are all tracked this way.
Where to look next
The pages that carry most of this role's week.
Audit & compliance
Roles & permissions
A tech, a biller, a clinical director, and an owner should not see the same chart.
Read more →Audit & compliance
Activity log
An immutable record of who did what and when, across the whole tenant.
Read more →Audit & compliance
42 CFR Part 2 handling
Part 2 protects SUD treatment records more tightly than HIPAA, and it governs what you can disclose, to whom, and with which consent.
Read more →Audit & compliance
Audit response packets
One click produces a paginated response packet with every signed record inline.
Read more →Get started
Start today, or take a look first.
Create your workspace in minutes and try the whole platform free for 14 days — no credit card. Or book a one-hour walkthrough first.