Trust, privacy and the record · 3 of 4
The record holds
What signing locks, why no edit is ever lost, and a log that survives the record it describes.
A clinical record is only as good as your ability to say what it said and who changed it. Three mechanisms carry that.
Signing locks the note
Signing marks the note reviewed and makes its content read-only. Only the provider on that visit can sign it.
It is a lock rather than a seal. The provider can unlock the note to correct it, and doing so is itself a recorded, permissioned action. That is the honest description, and a product that claimed signed notes were immutable would be describing something it does not do.
No edit is ever lost
Every change to a section creates a new version rather than overwriting the last one. Nothing is replaced in place.
The practical effect is that undo is a property of the record instead of a buffer that expires. Text from three edits and two days ago is still there. It also means an assisted edit can be compared against what was there before, rather than being taken on trust.
Every meaningful action is recorded
Notes created, generated, edited and signed. Audio uploaded. Memberships and permissions changed. Records exported or deleted. Each entry records who did it, to which record, and when.
The log carries no clinical content. It records that a note was edited, never what the note said. That is deliberate: an audit trail containing the thing it is auditing doubles your exposure instead of reducing it.
The log outlives what it describes
When a record is deleted, its audit entries remain. This is the part that matters in the situation you hope never happens.
If you have to investigate a possible breach, or answer a patient asking who accessed their information, the answer has to survive whatever was done to the underlying data. A log that disappears along with the record is not evidence of anything.
Where it sits
Inside your practice's own tenancy, appended to, not edited. Mesio adds entries and does not go back and revise them.