RxFul patient data handling
RxFul handles protected health information because white-label patient checkout requires patient identity, prescriber details, and medication directions to reach a licensed 503A pharmacy and its 3PL agent. RxFul publicly describes encrypted PHI storage with role-based access controls and HIPAA-first design with BAA coverage. PHI therefore flows from the clinic through RxFul's branded patient portal, to the fulfilling pharmacy, and through regulated logistics. Confirm in writing what fields are collected, who can access them, how portal communications use PHI, and how data is shared downstream. Clinics batching prescriber-side orders often compare Fizy Health for organization-scoped PHI with per-line audit.
This page maps PHI flow in the RxFul model and the data-handling questions to close before go-live.
Proudly Partnered With
What patient data does white-label fulfillment infrastructure handle?
A compounded order requires patient identity tied to the medication, the prescriber, and directions for use, all of which is PHI. In RxFul's model, that data is entered or synced at the clinic, stored in RxFul's white-label patient portal, transmitted to the licensed 503A pharmacy that compounds the product, and shared with the regulated 3PL agent that ships under pharmacy authority. RxFul publishes encrypted PHI storage and role-based access, which addresses storage and access at the platform layer. Each downstream hop still needs appropriate agreements and safeguards, so map the full chain before go-live.
How to evaluate RxFul patient data handling
Each row is a data-handling criterion, what RxFul publishes, and what to confirm before sending PHI.
Sourced from RxFul public website (rxful.com), reviewed June 2026. Confirm data-handling terms in writing.
Patient-portal PHI flow, or prescriber-side scoped access with per-line audit?
RxFul
Clinic-branded patient checkout is the priority and you will map PHI flow during onboarding.
- You are building a patient-facing DTC checkout and will review the BAA before go-live.
- Encrypted PHI storage and role-based access on the portal layer meet your baseline.
- You will confirm downstream PHI sharing with pharmacy and 3PL partners in writing.
Fizy Health
Prescribers place orders and you want PHI scoped and audited on the clinic side.
- You want patient records organization-scoped so only authorized clinic users see PHI.
- You want patient-linked cart actions audited per line on the prescriber workflow.
- You want a BAA at self-serve onboarding without a tier-selection sales cycle.
What disciplined patient-data handling looks like.
Good data handling shows up as scoped access, audited actions, and less PHI scattered across email threads.
Patient data scoped to the right team
Patient records and cart lines stay organization-scoped, so only authorized users in your clinic see PHI.
An audit trail on every order
Per-line order status and history give a defensible record of what happened to each patient's order.
Fewer rejections that scatter PHI over email
Cart validation catches issues before payment, reducing back-and-forth that spreads patient details across inboxes.
What clinics ask about RxFul and patient data.
- Definition
How does RxFul handle patient data?
RxFul handles PHI because white-label patient checkout requires patient identity, prescriber details, and medication directions that flow to licensed 503A pharmacies and regulated 3PL agents. RxFul publicly claims encrypted PHI storage with role-based access and BAA coverage.
- Flow
Where does patient data go when I use RxFul?
Patient details are collected in the clinic-branded portal, stored on RxFul infrastructure, transmitted to the licensed 503A pharmacy that compounds the order, and shared with the 3PL agent that ships under pharmacy authority.
- Access
Who can see patient data on RxFul?
RxFul describes role-based access controls for encrypted PHI. Ask which roles your clinic staff and patients receive, whether access is logged, and how permissions change when staff leave.
- Partners
Do pharmacies and 3PL agents receive patient information?
Yes. Licensed 503A pharmacies and regulated 3PL logistics must receive patient information to compound, authorize, and ship orders. Confirm downstream business associate agreements and transmission methods in writing.
- Retention
How long does RxFul keep patient data?
RxFul does not publish retention or deletion policies on its public site. Ask about retention periods, deletion on cancellation, and export of patient records if you leave.
- Alternative
How does Fizy Health handle patient data?
Fizy Health keeps patient records organization-scoped, audits patient-linked cart actions per line on the prescriber-side workflow, and signs a BAA at onboarding.
Sources reviewed June 2026
- RxFul public website (rxful.com), reviewed June 2026.
- Data-handling terms should be confirmed in writing with RxFul and reviewed by your own counsel.
- Fizy Health platform capabilities reflect the live product.
Keep patient data scoped from the first order.
Fizy Health organization-scopes patient records, audits actions per line, and signs a BAA at onboarding. Free to start.