For Healthcare Practices

No plugin can make a practice HIPAA compliant — compliance is a property of your whole setup: your hosting, your agreements, your processes. What we can tell you is where the documents sit. FileDeck publishes practice documents — policies, patient forms, price lists, protocols — and is not a patient-records system; protected health information does not belong in it. On your own server: ordinary keyword search and its index run entirely there, and on Pro protected files are moved into a deny-all directory and each download is re-checked against the visitor’s permission, so a restricted file has no working public URL by default. Signed share links, when you choose to issue one, expire. The only features that send document content off your server are scanned-PDF OCR and the AI tier, and both stay off until you switch them on with your own provider key. The security page sets out each control and its limits in full.

Yes — on Pro, restrict a category to a role or password. Patients see only a locked entry; nothing in it can be opened or downloaded.

No — leave patient categories public; only staff areas are protected.

Yes — on the AI plan, acknowledgment tracking asks the roles you choose to confirm they have read a document, chases whoever has not, and exports the record as CSV evidence. Useful for infection control policies and clinical protocols that must be signed off.

Yes — on Pro, set an expiry date and it drops out of the library on its own.

Yes — every document shows a running download count.