Turnkey Medical-Compliant eCommerce

Frequently Asked Questions

+ Is a trial available?

Yes. Our platform can be provisioned quickly, and there is a 30-day satisfaction guarantee on the SaaS option. If you're not happy within that period, you can receive a full refund of the SaaS subscription fee.

+ How much does it cost?

Pricing follows either a monthly SaaS model or a one-time license. The standard monthly fee is $999 without integrations or $1,599 with the integration platform included. Alternatively, a one-time license is $25,000 (core platform) or $35,000 (with integrations).

+ Does it really only take four weeks?

A functional site can typically be launched in about four weeks due to the platform's robust out-of-the-box capabilities. This initial phase launch provides a HIPAA-compliant environment for selling or managing health-related products and services.

+ Does it ever take longer than four weeks?

Sometimes additional time is required, especially when there are complex integrations or when client-side decisions and data inputs are delayed. Custom workflows or specialized features can extend the timeline.

+ What comes with the core platform?

By default, you receive a headless ecommerce API with secure data handling, a pre-built frontend, and an administrative dashboard. The system includes role-based access control, multi-factor authentication, standard payment processing, and configurable front-end workflows for healthcare applications.

+ What kind of integrations do you support?

The platform integrates with a wide range of external systems—EMR, EHR, pharmacy software, CRM, ERP, and more—through our dedicated integration product, Clarity Connect.

+ What kind of AI capabilities are included?

ClarityAI offers three key areas of AI support: content generation (e.g., product details, metadata), intelligent search and recommendations, and conversational AI for customer service.

+ Do you support headless ecommerce?

Yes. The platform uses a 'headless' architecture, allowing you to decouple the frontend from the backend and integrate HIPAA-compliant ecommerce functionality into any design or technology stack.

+ Can you accommodate a custom design?

Our platform can accommodate entirely custom designs. You can work with your own design team or use our in-house design experts to create a unique look and feel while maintaining HIPAA compliance.

+ Can you accommodate complex workflows?

Sophisticated workflows are supported through extensible hooks, pipelines, and robust APIs. Our platform can handle scenarios like doctor-patient portals, pharmacy fulfillment, telehealth sessions, lab result management, and more. You can configure or customize nearly every step to reflect your organization's specific procedures and compliance requirements.

+ How scalable is your platform?

Our platform is highly scalable, whether you have a large number of SKUs (e.g., millions of items) or a complex multi-store setup. It's built on containerized, modern programming frameworks that can handle heavy traffic through load balancing, caching, and auto-scaling on cloud platforms like Azure or AWS, ensuring reliable performance.

+ Is hosting included?

For SaaS deployments, hosting is handled in HIPAA-compliant cloud environments such as Microsoft Azure. You can also host on your own infrastructure or another cloud provider that meets HIPAA standards. Our platform is designed to run securely on Azure, AWS, or on-premise setups, depending on your preference and compliance needs.

+ Do we get the source code?

With the SaaS subscription, the code is typically licensed but not immediately owned. However, you may purchase the source code outright at any time. Alternatively, you can opt for a one-time license model, which grants you immediate ownership of the core platform code from the start.

+ How do you ensure HIPAA compliance?

A proven checklist and best-practice blueprint guide the entire implementation process, including data encryption, secure tokenization, role-based access, and detailed logging. The solution supports multi-factor authentication and end-to-end encryption. We can sign a Business Associate Agreement (BAA) , and clients often add a third-party auditing tool—like Accountable HQ—for ongoing compliance monitoring.

+ Can your platform work with my existing website or CMS and still be compliant?

You can integrate our headless ecommerce backend with an existing site or CMS (e.g., WordPress) without compromising compliance. Sensitive data and HIPAA workflows execute in our secure ecommerce backend, while your main site can continue running as normal, embedding HIPAA-compliant components via APIs or prebuilt widgets.

+ How do you handle secure access and role-based authorization?

User management includes distinct roles (e.g., patient, provider, admin). Multi-factor authentication is supported to enhance security. Administrators can granularly control who sees and edits protected health information. Auditing and logging track access, which helps to fulfill HIPAA's minimum necessary and traceability guidelines.

+ How do you handle secure payment processing?

A variety of payment gateways are supported. Any transmitted credit card data is tokenized and protected, ensuring your transactions comply with standard Payment Card Industry (PCI) rules. If needed, you can also work through integrated ISO partnerships for potentially more favorable transaction rates and advanced payment features.

+ What kind of reporting and auditing do you support?

Our platform features built-in reports for orders, user data, and audit trails. Extended reporting can be done via customizable modules or external tools integrated through the platform's APIs. All critical actions are logged, helping you maintain compliance and generate the audits you need for internal checks or external regulations.

+ What kind of training and support do you provide?

Comprehensive documentation and help resources are available, including how-to videos and knowledge-base articles. Ongoing consultative support is offered post-launch, and you can request further training sessions for your team. For broader HIPAA training across your organization, partner tools like Accountable HQ may also be recommended.

+ Can you execute a Business Associate Agreement (BAA)?

Yes. We can execute a BAA, which formalizes the responsibilities and safeguards that protect PHI in accordance with HIPAA regulations. This is standard practice to ensure all parties remain compliant throughout the partnership.

+ How do we best prepare for working with you?

Identify your ideal outcomes, gather any existing data or systems you want to integrate, and outline your business workflows. Think about what you need in the next few years so your initial setup leverages as many out-of-the-box features as possible. Having clear objectives and data requirements makes your discovery phase run more smoothly.