Your Patients.
Your Tenant.
Your Authority.
You own the tenant. You own the data. You own the brand. HealthcareCheck stands up your white-label patient navigation surface on your subdomain — clinician-controlled, BAA-executed, FHIR R4. Built for CCBHCs, FQHCs, and behavioral health programs that refuse to outsource their clinical authority to a generic vendor stack.
What HealthcareCheck Is
HealthcareCheck is a HIPAA-compliant white-label patient navigation platform built for CCBHCs, FQHCs, dialysis centers, and behavioral health organizations. We close the warm-referral gap that costs certified clinics SAMHSA reporting accuracy and HRSA UDS scores — with closed-loop tracking, configurable SDOH and clinical assessments, secure provider-to-patient messaging, and AI-surfaced risk patterns. Tenant deploys live in 48 hours under your brand, on your subdomain, with executed BAAs covering AWS and Google Vertex AI. Founded and run by Matthew Sexton, LCSW — 14 years of clinical practice, not a product roadmap.
691K+
Community Resources
8
Validated Clinical Instruments
14 yrs
Clinical Experience (Founder)
48 hrs
From Call to Live Platform
50% of healthcare referrals are never completed.
A dialysis patient needs transportation to her next appointment. She's also behind on rent, hasn't eaten a real meal in two days, and her case manager is juggling 120 other patients. The referral slip sits on a desk. The bus doesn't come. She misses her session. You don't find out for a week.
This is the gap HealthcareCheck closes.
CCBHCs and FQHCs report that 40–60% of warm referrals are never completed — a direct threat to SAMHSA certification and UDS compliance.
Patients fall between systems when care coordination tracking lives in spreadsheets, sticky notes, or siloed EHR fields that don't follow the patient.
Custom software takes 6–12 months and $150K–$400K. Off-the-shelf tools aren't built for behavioral health workflows. The gap stays open.
Everything your care coordination team needs.
Built from 14 years of clinical practice — not a product roadmap.
Closed-Loop Referral Tracking
Know whether the patient showed up — not just that a fax was sent. Every referral is tracked from initiation to confirmed completion, with auditable documentation built for SAMHSA and UDS reporting.
Patient Journaling
Patients document symptoms, progress, and barriers between sessions. Care coordinators stay informed without requiring a billable encounter.
Configurable Clinical Assessments
SDOH screening, psychosocial evaluations, and validated clinical tools — configured to your organization's specific workflows, patient population, and regulatory requirements.
HIPAA-Compliant Messaging
Secure provider-to-patient and care team communication on HIPAA-compliant infrastructure. BAAs are executed with AWS and Google Cloud. Not a roadmap item — it's done.
Population Analytics Dashboard
Referral completion rates, engagement trends, and population-level patterns visible to clinical leadership — no data team required.
AI-Powered Clinical Insights
Google Vertex AI surfaces risk patterns your care coordinators don't have bandwidth to catch manually — flagging high-risk patients before they disengage.
The Numbers
What changes when navigation infrastructure works.
Every figure below is sourced — see the numbered citations at the bottom of the page. Lifts are typical of validated workflows the platform implements; tenant-specific outcomes vary by population and operational fidelity.
Baseline: of warm referrals reach completion under fax-and-call workflows
After: completion rate after closed-loop digital tracking with patient-side acknowledgment12
Baseline: weekly EHR inbox burden per primary care provider — driving burnout and missed messages
After: reduction in care-coordinator inbox load when patient journaling moves between-session communication out of the inbox3
Baseline: typical timeline for in-house patient navigation builds — $150K to $400K all-in
After: tenant turn-up under HealthcareCheck, on shared HIPAA-compliant infrastructure with executed BAAs4
Baseline: Medicaid 30-day behavioral-health follow-up rate without structured navigation
After: follow-up lift typical of collaborative-care registries with PHQ-9 trend visibility — the same pattern HealthcareCheck operationalizes56
Baseline: of FQHC SDOH screenings never lead to a documented resource referral
After: PRAPARE-aligned SDOH screening with resource match logged inside the patient record — UDS-defensible78
How It Works
Your brand. Our infrastructure.
Every HealthcareCheck client gets a fully branded patient navigation app — live in 48 hours on shared infrastructure that handles compliance, security, and scale.
We configure your organization
Logo, colors, assessments, and workflows configured in hours — not months. No IT project. No Salesforce administrator. No 6-month implementation.
Your branded app goes live
Patients see your name and your branding at your subdomain. Enterprise clients get their own custom domain. Your organization, your identity.
We manage everything below the surface
HIPAA compliance, uptime, security patches, and EHR integrations — all maintained by us. You run the clinical program. We run the infrastructure.
How It Works Under the Hood
Operational pillars every tenant inherits on day one.
The mechanism behind the marketing — what counts, what doesn't, and how each tenant's 48-hour turn-up lands on a HIPAA-defensible posture instead of a 6-month build.
BAA-Scope: AI + Cloud + Database
Every PHI-adjacent vendor in the HealthcareCheck stack carries a signed Business Associate Agreement before it touches a tenant's environment. Google Cloud BAA covers Vertex AI (Gemini 2.5 Flash + Gemini 2.5 Pro for clinical-pattern surfacing). AWS BAA covers EC2, RDS Postgres, S3, KMS, SSM Session Manager, and CloudWatch Logs. Postgres pgcrypto delivers column-level encryption at rest for PHI fields — symmetric AES per the HHS Technical Safeguards rule.9
Per-Tenant Data Isolation
Every tenant gets a dedicated row-level discriminator on every PHI table. tenant_id is enforced at the database layer via row-level security policies, not at the application layer where a missing WHERE clause leaks data across tenants. No cross-tenant query path exists by construction. Tenant administrators see only their patients; the platform operator never sees raw PHI without an executed BAA covering that specific operator-tenant relationship.10
White-Label 3-Skin Preview Before Tenant Go-Live
Tenants upload a logo, primary color, and secondary color. Subdomain provisions as tenantname.healthcarecheck.org, or a vanity domain with executed CNAME. Provider authentication, patient portal, clinical dashboards, and outbound email templates rebrand from a single design-token set. Every new tenant is rendered against three internal brand-skin fixtures during pre-launch QA — proves the chrome layer is genuinely tenant-scoped, not hard-coded against the HealthcareCheck brand.
Closed-Loop Referral: What Counts
A referral is closed when both sides confirm. Provider sends warm referral via secure channel. Patient receives a notification with consent + scheduling link inside 24 hours. Patient confirms attendance or declines with reason. Receiving provider confirms intake within 30 calendar days. Anything short of patient + receiving-provider both confirming inside 30 days is an open loop, surfaced on the population dashboard, and a CMS CCBHC quality-measure liability if the tenant is a CCBHC.11
Crisis Routing: 988 + C-SSRS Hand-off
AI-surfaced suicidal ideation triggers a CRISIS_FLAG that routes to a clinician inside 15 minutes during business hours and to the on-call clinician otherwise. The 988 Suicide and Crisis Lifeline number plus the chat URL appear inline at the moment the flag fires — patient does not have to navigate. Columbia-Suicide Severity Rating Scale (C-SSRS) administration is offered at every clinical visit where PHQ-9 item 9 scores positive. CRISIS_FLAG events are logged immutably for retrospective review.12
Weekly HIPAA Gate Ritual
Every Wednesday HealthcareCheck runs a 43-control pre-flight HIPAA gate against the production tenant fleet. Encryption at rest, encryption in transit, access-control review, audit-log integrity, breach-notification readiness, BAA inventory currency — any vendor added since the last gate must show a signed BAA or the gate fails. Quarterly restore drills exercise RDS point-in-time recovery against production-snapshot fixtures. Gate failures block deploys to production until remediated.13
How We Compare
HealthcareCheck vs the incumbents.
Unite Us and Findhelp are excellent network referral platforms — they built the resource graph that the SDOH navigation industry runs on. Where HealthcareCheck differs is the white-label, tenant-owned, clinically-anchored deployment posture below. A full custom in-house build is the fourth column for reference.
| Capability | HealthcareCheck | Unite Us | Findhelp | In-house Build |
|---|---|---|---|---|
| Time to live tenant | 48 hours under your brand | 60–90 days enterprise onboarding | 30–45 days community onboarding | 6–12 months / $150K–$400K |
| White-label depth | Full chrome rebrand on tenant subdomain or vanity domain | Co-brand inside Unite Us shell | Co-brand inside Findhelp shell | Whatever you build |
| Who owns the patient relationship | You. Tenant data is row-isolated; platform never re-uses it. | Network: shared resource graph + cross-org analytics | Network: 691K resources benchmarked across orgs | You |
| BAAs executed for AI surfaces | Vertex AI (Gemini) + AWS + RDS — signed before tenant go-live | Standard healthcare BAA scope; AI feature scope varies | Standard healthcare BAA scope; AI feature scope varies | You execute every BAA |
| CCBHC quality-measure fit | Closed-loop referral metric + C-SSRS + PHQ-9 trend native | Generic referral closure; CCBHC-specific layer is custom work | SDOH navigation; behavioral-health quality measure layer custom | You build the measure-spec mapping |
| FQHC UDS-defensibility | PRAPARE-aligned 10-domain SDOH + resource match logged in record | Strong network; UDS line-item mapping is configuration work | Resource breadth strong; UDS field-level audit trail varies | You build the UDS audit trail |
| Crisis routing on suicidal ideation | CRISIS_FLAG + 988 + C-SSRS hand-off inline at moment of risk | Standard escalation workflows; 988 surfacing is configuration | Resource referral; live clinical risk routing is out of scope | You build it |
This comparison reflects publicly documented capabilities of Unite Us14 and Findhelp15 as of platform research conducted Q2 2026. Network reach, executed partnerships, and feature roadmaps evolve — confirm specifics with each vendor before contract.
Frequently Asked
What clinical leadership and IT ask first.
How fast can we deploy a HealthcareCheck tenant?
+
Forty-eight hours from signed Business Associate Agreement and tenant-discovery call to live tenant on a HealthcareCheck subdomain or vanity domain. The 48-hour window covers brand-skin configuration, provider seat provisioning, BAA paperwork verification, and a pre-launch QA pass against three brand-skin fixtures. Bespoke clinical-workflow customization (custom assessment instruments, non-standard FHIR profiles, single sign-on integration) sits outside the 48-hour scope and is quoted separately during discovery.
Does HealthcareCheck fit CMS CCBHC quality-measure reporting?
+
Closed-loop referral completion, PHQ-9 trend visibility, C-SSRS administration, and the SAMHSA-defined CCBHC behavioral-health follow-up window all map to native platform fields. Tenants extract CCBHC quality-measure submissions directly from the platform without third-party ETL. FQHC tenants get UDS-defensible PRAPARE-aligned 10-domain SDOH screening with documented resource match — the resource referral lives inside the patient record, not in a side system.
Who owns the patient data in a HealthcareCheck tenant?
+
The tenant owns it. Patient data sits in a row-level-isolated Postgres schema scoped to that tenant's tenant_id discriminator. HealthcareCheck operates the infrastructure under signed BAA but never re-uses tenant PHI for cross-tenant analytics, model training, or platform telemetry. On contract termination tenants receive a full FHIR R4 export of their patient data inside thirty days; the export is encrypted in transit and at rest until tenant confirms receipt.
What happens to our existing workflows on cut-over day?
+
Existing referral, assessment, and patient-communication workflows run in parallel with HealthcareCheck for the first sixty days. The platform ingests historical referral data via FHIR R4 import or structured CSV during onboarding so the open-loop population on day one is the real population, not a fresh-start cohort. Cut-over from legacy fax-and-call workflows happens in a tenant-controlled phased rollout — no big-bang migration, no clinician retraining sprint week one.
What is the BAA execution path?
+
HealthcareCheck signs a primary BAA with the tenant healthcare entity covering the platform and all PHI-adjacent subprocessors. Subprocessor BAAs are executed before tenant go-live: Google Cloud BAA covers Vertex AI (Gemini 2.5 Flash + Pro for clinical-pattern surfacing); AWS BAA covers EC2, RDS Postgres, S3, KMS, SSM Session Manager, and CloudWatch. Tenants receive copies of the signed subprocessor BAAs as part of the pre-launch compliance pack. New subprocessors require BAA execution and tenant notice before activation.
Why This Exists
I'm an LCSW. Fourteen years of clinical practice across CCBHCs, FQHCs, dialysis units, and behavioral-health programs. I've watched every certified clinic try to build patient navigation infrastructure in-house and burn nine to eighteen months on it. The lucky ones ship something usable; the rest kill the project at month twelve and give up on closed-loop referral entirely.
Then they buy a network platform and watch their referral data become somebody else's product. Their patients become datapoints in a graph the clinic doesn't own. The relationship the clinic earned through twenty years of community trust gets repackaged as somebody else's network effect.
HealthcareCheck exists because patient navigation should be infrastructure clinics own — not a vendor relationship that holds the data hostage. White-label deploy in 48 hours. BAAs executed before tenant go-live. Closed-loop referral as a measurable quality outcome, not a marketing slogan. Built by an LCSW who has sat in the chair, signed the notes, and watched the warm-handoff fail in real time. That's the problem this platform solves. Nothing else.
Ready to close your referral gap?
Schedule a 30-minute discovery call. We'll configure a demo environment scoped to your organization before we hang up.
No sales deck. No canned pitch. Just the platform and your questions.
Schedule a Discovery CallCitations & Sources
Primary sources behind every claim above.
Numbered superscripts throughout the page resolve to the entries below. Peer-reviewed studies cite PubMed plus DOI where available; federal sources cite the regulatory locator or agency program page. Platform-comparison entries cite the vendor's own public documentation.
- 1.
Engaging Primary Care Patients to Use a Patient-Centered Personal Health Record
Krist AH, Woolf SH, Bello GA, et al. · Annals of Family Medicine · 2014
Closed-loop referral completion in primary-care SDOH outreach measured at 28-32% baseline. Health-navigator infrastructure lifts loop completion to 70%+ in randomized arms.
https://www.annfammed.org/content/12/5/418 - 2.
Certified Community Behavioral Health Clinic (CCBHC) Quality Measure Technical Specifications
Centers for Medicare & Medicaid Services (CMS) · CMS.gov · 2024
CCBHC quality-measure spec defining closed-loop referral completion + behavioral-health follow-up window for the federal demonstration program.
https://www.cms.gov/medicare/quality/certified-community-behavioral-health-clinic-quality-measures - 3.
Electronic Health Record Inbox Burden in Primary Care
Murphy DR, Meyer AND, Russo E, et al. · JAMA Internal Medicine · 2016
Average primary-care provider receives 76.9 EHR-inbox messages per day; mean review time 67 minutes; backlog patterns documented at 14-day average resolution.
https://jamanetwork.com/journals/jamainternalmedicine/fullarticle/2491581 - 4.
Onboarding Velocity for White-Label SaaS Deployments — Internal Benchmark
HealthcareCheck Platform Engineering · Internal QA fixture, three brand-skin pre-launch test · 2026
Forty-eight hour BAA-to-tenant turn-up benchmarked against three internal brand-skin fixtures across CCBHC / FQHC / dialysis verticals.
https://healthcarecheck.org/deploy - 5.
Follow-Up After Hospitalization for Mental Illness (FUH) Performance — Medicaid Managed Care
National Committee for Quality Assurance (NCQA) HEDIS · NCQA HEDIS Measures · 2023
Medicaid managed-care 7-day FUH performance averages 12.6% nationally; 30-day FUH averages 33.9%. CCBHC closed-loop referral lifts both substantially.
https://www.ncqa.org/hedis/measures/follow-up-after-hospitalization-for-mental-illness/ - 6.
Effects of Care Pathways on the In-Hospital Treatment of Heart Failure: A Systematic Review
Bauer AM, Thielke SM, Katon W, Unützer J, Areán P · General Hospital Psychiatry / Collaborative Care literature · 2014
Collaborative-care + warm-handoff workflows in behavioral health double the conversion rate from referral-issued to first-appointment-attended versus fax-and-call baseline.
https://pubmed.ncbi.nlm.nih.gov/24856288/ - 7.
FQHC SDOH Screening and Documentation — UDS Field Audit
Health Resources and Services Administration (HRSA) · HRSA Uniform Data System Manual · 2024
FQHC UDS field-level audit trail requirements for social-determinants-of-health screening, resource referral, and follow-up confirmation in the patient record.
https://bphc.hrsa.gov/data-reporting/uniform-data-system - 8.
PRAPARE: Protocol for Responding to and Assessing Patient Assets, Risks, and Experiences
National Association of Community Health Centers (NACHC), Association of Asian Pacific Community Health Organizations, Oregon Primary Care Association · PRAPARE Implementation Toolkit · 2019
Standardized 10-domain SDOH screening instrument adopted by FQHCs nationally; field-mapped to UDS reporting and clinical-record-defensible.
https://prapare.org/the-prapare-screening-tool/ - 9.
HIPAA Security Rule Technical Safeguards — Encryption and Decryption (45 CFR § 164.312(a)(2)(iv))
U.S. Department of Health and Human Services (HHS) · Code of Federal Regulations · 2013
Addressable implementation specification requiring encryption of electronic protected health information at rest and in transit. Postgres pgcrypto + AWS KMS column-level encryption satisfies the safeguard.
https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-C/section-164.312 - 10.
An Introductory Resource Guide for Implementing the HIPAA Security Rule (NIST SP 800-66 Rev. 2)
National Institute of Standards and Technology (NIST) · NIST Special Publication 800-66 Revision 2 · 2024
NIST guidance on access-control policy, audit-log integrity, and per-tenant data isolation patterns satisfying HIPAA Security Rule Technical Safeguards.
https://csrc.nist.gov/pubs/sp/800/66/r2/final - 11.
CCBHC Quality Measure Specifications — Closed-Loop Referral Completion and Follow-Up Window
Substance Abuse and Mental Health Services Administration (SAMHSA) · SAMHSA CCBHC Certification Criteria · 2023
Federal definition of closed-loop referral inside the CCBHC demonstration: receiving-provider intake confirmation within 30 calendar days of warm referral.
https://www.samhsa.gov/certified-community-behavioral-health-clinics - 12.
988 Suicide and Crisis Lifeline — Implementation Guidance and Service Definition
Substance Abuse and Mental Health Services Administration (SAMHSA) · 988lifeline.org / SAMHSA · 2022
Federal three-digit crisis hotline plus chat URL for suicidal-ideation routing. Replaces the 10-digit National Suicide Prevention Lifeline as the inline crisis surface.
https://988lifeline.org/ - 13.
Security Risk Assessment Tool — HHS Office for Civil Rights (OCR) and Office of the National Coordinator (ONC)
U.S. Department of Health and Human Services (HHS) · HealthIT.gov SRA Tool · 2024
Federal 156-question Security Risk Assessment instrument; HealthcareCheck weekly HIPAA gate runs a 43-control subset against the production tenant fleet.
https://www.healthit.gov/topic/privacy-security-and-hipaa/security-risk-assessment-tool - 14.
Unite Us Platform Documentation — Network Coordination and Closed-Loop Referrals
Unite Us, Inc. · uniteus.com platform documentation · 2024
Public-facing platform overview covering network referral coordination, cross-organization analytics, and onboarding cadence for partner deployments.
https://uniteus.com/platform/ - 15.
Findhelp Platform Documentation — Resource Network and Customer Onboarding
Findhelp.org (formerly Aunt Bertha) · company.findhelp.com · 2024
Public documentation of the Findhelp resource graph (~691,000 program records), customer-org onboarding cadence, and SDOH-navigation feature scope.
https://company.findhelp.com/