How this guide was made, and our conflict of interest
Short version: vendor facts come from each vendor's own website, read on 2026-11-12, with the page linked in every row. BAA requirements come from the regulation text. We did not test vendors hands-on for this guide. Medrecords AI publishes the guide and sells 1 product in it; the rules below keep that from shaping the facts.
Limits: Vendor facts come from each vendor's own website, read on 2026-11-12; we haven't run every product, and prices, terms and security claims change, so get them in writing before you sign.
Where the facts come from
| Source | Used for | Captured |
|---|---|---|
| Google top results for 5 buyer searches, including the exact phrase "medical record review software" | Which vendors and guides to read, and what this guide should add | 2026-11-12 |
| 16 vendors' own pricing, security and product pages | Pricing table and security table | 2026-11-12, linked per row |
| 45 CFR 164.504(e), from the eCFR | The BAA clause table | 2026-11-12 |
| HHS breach notification and business associate guidance pages | Breach notice timing, business associate duties | 2026-11-12 |
| AICPA SOC suite page | SOC 2 criteria names | 2026-11-12 |
| medrecords.ai/pricing.md and llms.txt | Every fact about Medrecords AI | 2026-11-12 |
When a vendor's page doesn't state something, we write "not stated on pages read" or "not published" instead of guessing. 3 vendors' security pages didn't load for us (Dodonai, OctopusLM, Wisedocs); their cells say so.
What we did not do
- We did not run every product. The tables report what vendors publish, which is what a buyer can see before a sales call.
- We did not score or rank vendors. This site gives buyers questions, a scorecard and math; ranking is a different job.
- The worked examples use synthetic practices and synthetic inputs, labelled as such. No real patient, clinic or customer appears.
- Nothing here is legal advice. The BAA table is a reading aid.
How we keep it current
We recheck every vendor row at least every 45 days and update the capture date when we do. Vendors can send corrections to aj@medrecords.ai with a link to their own page; confirmed fixes go live within 2 business days.
Our conflict of interest, and the rules we follow
This site is published by Medrecords AI, which sells medical record review software listed in both vendor tables. That is a conflict. These are the rules we hold to:
- A disclosure line sits at the top and bottom of every page.
- Medrecords AI is labelled as ours wherever it appears.
- Medrecords AI gets the same table columns as every other vendor, and its page answers the same checklist, including where it is the wrong pick.
- Links to medrecords.ai appear only on the Medrecords AI page and in boxed notes that say when it fits.
- We state nothing about another vendor that its own website doesn't support, and we link the page.
- No vendor paid to appear, and none can pay to change its row.
We don't claim to be independent. Judge the facts by their sources, which are linked so you can check them.