HIPAA Compliant

Patient documents from your EHR.
Delivered via API.

Send patient IDs, get back PDFs. We handle the EHR login, document download, and conversion. Standard OAuth2.

  Four endpoints. That's it.
# 1. Authenticate
curl -X POST https://get-docs.medchartscan.io/auth/token \
  -d '{"grant_type":"client_credentials","client_id":"yourorg","client_secret":"..."}'
→ {"access_token": "eyJhbG...", "expires_in": 3600}

# 2. Submit patients
curl -X POST https://get-docs.medchartscan.io/batches \
  -H "Authorization: Bearer TOKEN" \
  -d '{"patient_ids": ["135873", "140201"]}'
→ {"batch_id": "batch_abc123", "status": "pending"}

# 3. Download documents
curl https://get-docs.medchartscan.io/batches/batch_abc123/patients/135873
→ {"documents": [{"name": "Lab Report", "category": "Chart Documents", "pages": 3, "url": "https://..."},
                  {"name": "ProgressNote_2025-08-17_OV.pdf", "category": "Progress Notes", "encounter_id": "1147159", "url": "https://..."}]}

# Already have your data? Re-fetch fresh signed URLs (or poll for new ones since a timestamp).
curl https://get-docs.medchartscan.io/documents?patient_id=135873&since=2026-05-01T00:00:00Z
→ {"patient_id": "135873", "total": 32, "filtered": 4, "documents": [...]}

# 4. Or list the EHR's providers + staff (cached)
curl https://get-docs.medchartscan.io/users?type=provider \
  -H "Authorization: Bearer TOKEN"
→ {"type": "provider", "total": 86, "users": [{"uid": 148441, "fullname": "...", "NPI": "...", "speciality": "Nurse Practitioner"}, ...]}
🔒

HIPAA compliant

Per-org isolation. Encrypted transport. Audit logging. BAA with Google Cloud.

Incremental sync

Only new documents downloaded. GET /documents?since=… pulls only what's changed.

📄

Documents & progress notes

Attached EHR documents and clinical progress notes, both delivered as multi-page PDFs via signed URLs.

🔐

Standard OAuth2

client_id + client_secret. No vendor SDKs. Works with any language.

📊

Usage tracking

Real-time counters. Patients, documents, and pages extracted per month.

🛡️

Enterprise protected

Cloud Armor DDoS protection. Rate limiting. Instant org kill switch.

Ready to get started?

Tell us about your organization and we'll have you up and running within one business day.

Request Access