TrackStat automatically signs users out after a period of inactivity. This applies to all practices and cannot be extended or disabled.
Why this is required
Healthcare software that handles patient information must follow the HIPAA Security Rule. One of the required safeguards is automatic logoff: the system must end a session after a set period of inactivity so that an unattended computer, tablet, or browser cannot be used by someone else to view or reply to patient messages.
This protects your patients’ protected health information (PHI). If a staff member steps away from a logged-in screen—whether at the front desk, in a treatment room, or later in the evening—the session ends so the next person cannot access patient conversations.
What this means for your practice
The timeout is the same for every TrackStat account.
We cannot lengthen the session or refresh token validity for individual practices.
After the timeout, you will need to sign back in to continue working in the system.
These controls are in place so that TrackStat and the practices we support stay compliant with HIPAA and keep patient data secure.