Answers before tickets

A Windows PC or a Mac for the desktop app, installed from the Microsoft Store or the Mac App Store. The clinician mobile companion comes from the App Store on iPhone and iPad and from Google Play on Android, with a Practice edition.

Install from your platform's store, create your account, work. Every account starts a 30-day trial at sign-up — every feature, no card. When it ends, everything you documented stays fully accessible; holding a seat is what keeps new patient intake open.

No. Every edition syncs through our sync server — there is nothing for you to host, and it only ever stores sealed entries it cannot read.

Export an encrypted .cfbak file at any time — it captures the whole practice and restores from scratch. Every entry also goes to the sync server sealed, so any device can be rebuilt after sign-in. Both stay available in every seat state.

The database is encrypted at rest (SQLCipher, AES-256) with keys derived from your vault password and held in an encrypted vault on your machine. Field-level encryption covers sensitive values inside it; raw keys never appear in the interface or in logs.

PDF reports, CSV and the .cfbak archive — from the export screens, in every seat state, forever. De-identified export with automatic redaction is built in for sharing beyond the care relationship. More on export & backup.

Fill the CSV templates from your old system's export and import them under Settings → Import data: patients and historical session notes come across, with a preview of problems and duplicates before anything is written. Prior PDFs attach to each chart as documents. The migration guide & templates.

Sign in on the device with your email and password — it is approved from one of your other devices, and every seat, Solo included, covers five devices, three of them computers. The new device receives the sealed history from the sync server and converges automatically.

Mark it lost, from any of your devices. Its access ends immediately, your other devices are signed out, you set a new password, and the data already on it stays encrypted at rest — losing hardware is not disclosing records.

Everything keeps working — the app is local-first. Changes queue on the device and sync merges them when you're back online; simultaneous edits converge rather than overwrite.

The in-office kiosk — patients completing forms on a practice device — ships in every edition including Solo. The remote portal, where patients message, book and complete PROMs from home, is what the Practice edition adds.

By invitation from the practice. You control who can message and book; patients see only their own record's surface — messages, documents, forms and bookings.

A subscription is a pool of seats on the payer's account. Seats are handed to people by invitation and follow the person into every practice they share with the payer. Everyone who works on the shared record holds one: you pay for clinician seats, and each one comes with a free seat for a front desk or bookkeeper. Storage for the sealed records comes with every seat. Your devices learn their seat at sign-in and keep working on it, so an outage on our side can't lock you out.

Adding stops — sending new entries to the sync server, portal publishing. Signing in, reading and exporting carry on for 90 days, then the server copy is deleted. Your existing records on your devices stay readable, editable and exportable in every seat state. The full capability matrix is published on the pricing page. See the degradation matrix.

Card and seat management runs through our merchant of record's customer portal — the billing link in the site footer takes you there.