Clinical training records, protected with clarity and control.
Pracadium holds student clinical-training records — typically education records under FERPA when managed by your program. We're built for the way institutions actually vet a vendor: a completed HECVAT, a Data Processing Agreement ready to sign, encrypted storage, role-based access, and an audit trail your security team can verify.
- FERPA-aligned handling of student records
- Completed HECVAT, available on request
- Data Processing Agreement ready to sign
- Role-based access with audit history
Security posture
Program instance
Access model
Role-based
Record status
Signed
Evidence trail
Timestamped
Export access
Available
Protected record flow
The operational record behind clinical training.
Clinical programs do not just need storage. They need a reliable record of who did what, who verified it, and how it supports the program's requirements.
Designed for controlled access and durable evidence.
Pracadium keeps security practical: the right people get the right access, and the evidence remains usable when your program needs to show its work.
Encrypted in transit
Connections to Pracadium use encrypted transport so clinical training records are protected as they move between users and the platform.
Dedicated data environment
Your program runs in a dedicated secure instance, keeping your records organized around your institution, cohorts, sites, and requirements.
Role-based permissions
Students, site supervisors, faculty, coordinators, and directors each see the records and workflows appropriate to their responsibilities.
Audit-ready history
Hours, evaluations, signatures, approvals, and edits are retained with the context programs need for review and accreditation evidence.
Signed clinical records
E-signatures and date stamps make supervision logs, hour records, evaluations, and approvals easier to verify when questions arise.
Portable exports
Your accreditation evidence stays usable. Reports and records can be exported so your program is not locked into a black box.
Your records stay useful, portable, and yours.
Pracadium is built around the reality that clinical training data has a long life. A student's hour logs, supervisor signatures, evaluations, dispositions, and placement history may matter during a semester, at graduation, and during a future accreditation review.
That is why the platform treats reports and exports as a core responsibility. Your program should be able to produce the record behind a decision or accreditation claim without rebuilding it from email threads and spreadsheets.
Security that follows the workflow.
The safest record is the one captured correctly the first time, by the right person, with the verification your program needs.
Access is intentional
Permissions are assigned around clinical training roles, so sensitive student and program records are not exposed broadly by default.
Evidence is traceable
The number in a report can be traced back to the signed record behind it, reducing the risk of unsupported accreditation claims.
Configuration is controlled
Program requirements, rubrics, hour thresholds, and workflows are configured deliberately so the platform reflects how your program operates.
Records are built over time
Data accumulates as students, supervisors, and faculty complete normal workflows, creating a durable history instead of a rushed reconstruction.
Ready for your security and procurement review.
Adopting a new system means clearing your institution's vendor review. We keep the documents that process asks for on hand, so evaluating Pracadium is fast rather than a multi-month stall.
HECVAT on file
We maintain a completed Higher Education Community Vendor Assessment Toolkit (HECVAT) so your security and procurement teams can evaluate Pracadium against the framework they already use — no bespoke questionnaire required.
FERPA-aligned by design
When your program manages a cohort, student clinical-training records are typically education records under FERPA, and Pracadium handles them that way: access is role-scoped, activity is logged, and your institution retains ownership — consistent with your obligations.
Data Processing Agreement ready
A standard Data Processing Agreement (DPA) is available for signature, defining how records are processed, stored, and returned or deleted — so your contracts and privacy office have the terms they need up front.
One-page security overview
For a fast IT review, a concise overview summarizes encryption, access control, hosting, and data handling on a single page — turning a security review into a quick sign-off instead of a months-long back-and-forth.
Need the HECVAT, a DPA, or the security overview for your review? Request the documents.
Data and security, answered.
Common questions programs ask before vendor review or a platform walkthrough.
Yes. We maintain a completed Higher Education Community Vendor Assessment Toolkit so your security team can assess Pracadium against the framework they already use. We can share it as part of your vendor review — just ask.
When your program manages a cohort, the clinical-training records Pracadium stores are typically education records under FERPA, and we handle them accordingly: access is scoped to clinical training roles, activity is logged with timestamps, and your institution retains ownership of and access to the data. (A student using the free, self-serve plan to log their own hours isn't creating an institutional education record — FERPA applies once your program is the customer.)
Yes. A standard DPA is available for signature. It sets out how clinical training records are processed, stored, and returned or deleted, so your contracts and privacy office have the terms in writing before launch.
Your program owns its data. Pracadium is designed so clinical training records and accreditation evidence remain accessible to the institution through reports and exports.
Yes. Pracadium uses role-based views so students, site supervisors, faculty supervisors, clinical coordinators, and program directors interact with the records they need for their work.
Yes. Signed records, approvals, and key clinical training activity are retained with timestamps and context so programs can produce evidence when a review or question comes up.
Yes. Pracadium is built around producing usable evidence, not trapping it. Programs can export the reports and records they need for accreditation, review, or internal documentation.
No. Most institutions have their own vendor review process. Pracadium gives your team a clear security and data ownership posture to evaluate through that process.
Review Pracadium with your security team.
We'll walk through the platform, the records it stores, and how the workflow supports your institution's review process.