Tailor Made Compounding patient data handling
Tailor Made Compounding receives protected health information whenever a clinic submits a patient-specific compounded prescription — demographics, prescription details, prescriber credentials, and shipping addresses flow into Tailor Made's compounding, quality assurance, billing, and fulfillment systems. Data also moves through the EMR prescriber portal at emr.tailormadecompounding.com, support email paths, and business associates described in Tailor Made's HIPAA notice for billing and software services. Tailor Made publishes a Notice of Privacy Practices but not a public data-flow diagram. Request a signed BAA, subprocessors list, and portal access model before scale. Clinics comparing organization-scoped cart PHI controls evaluate Fizy Health alongside pharmacy BAAs.
Where PHI enters Tailor Made's workflow — and the safeguards to confirm in writing.
Proudly Partnered With
How does patient data flow through Tailor Made Compounding?
A typical clinic order starts in your practice: your team or prescriber enters patient and prescription data into Tailor Made's EMR prescriber portal after account approval. Tailor Made uses that PHI to compound in its Nicholasville facility, run quality checks including sterility testing described on its Quality page, bill under clinic agreements, ship to the patient address, and coordinate support. Tailor Made's privacy notice permits disclosures to pharmacists, technicians, billing associates, and software business associates involved in treatment, payment, and operations. Your diligence job is mapping each hop, confirming BAAs cover subprocessors, and aligning portal access with your internal minimum-necessary policy.
What to verify about Tailor Made Compounding patient data handling
Each row is a PHI touchpoint, what Tailor Made publishes, and what to confirm before transmitting data at volume.
Sourced from Tailor Made Compounding privacy policy, Quality page, and EMR portal (tailormadecompounding.com), reviewed June 2026.
Trust pharmacy BAAs alone, or add product-level PHI controls?
Tailor Made Compounding
You will map PHI flows during account-request onboarding.
- You will obtain a signed BAA and subprocessors list before transmitting PHI at scale.
- EMR portal access matches your clinic's minimum-necessary staffing model.
- You only order Tailor Made SKUs — PHI stays inside one compounder relationship.
Fizy Health
You want organization-scoped PHI controls in the ordering layer.
- You want patient-linked cart actions audited per line with organization-scoped access.
- You batch refills across multiple 503A partners and need one HIPAA-governed ops layer.
- You want validation before payment so PHI is not spent on orders that will be rejected.
What organization-scoped PHI handling looks like in practice.
PHI safety is not only where data is stored — it is who can touch it and what gets logged.
Per-line audit on every cart mutation
Patient-linked cart actions are audited per line — a compliance record your team can reference.
Organization-scoped access
Team roles and clinic boundaries keep PHI inside your organization — not leaking across accounts.
Validation before PHI-backed payment
Cart validation catches issues before checkout so PHI is not tied to orders that will fail pharmacy review.
What clinics ask about Tailor Made Compounding patient data handling.
- Definition
What patient data does Tailor Made Compounding receive?
Tailor Made receives PHI needed to compound and ship patient-specific medications — typically patient identity, prescription details, prescriber information, shipping address, and billing data submitted through the EMR prescriber portal or equivalent workflow.
- Portal
Where is PHI stored when I use the EMR portal?
Tailor Made does not publish hosting or retention specifics on its marketing site. Request data location, retention periods, and backup policies in the BAA and safeguard documentation.
- Subprocessors
Does Tailor Made share PHI with third parties?
Tailor Made's HIPAA notice permits disclosures to business associates performing billing, collections, and network or software services. Request a subprocessors list with BAAs during onboarding.
- Migration
Does portal migration affect patient data?
Tailor Made launched a new Provider Portal in November 2024 while the legacy portal has shown maintenance downtime. Ask how historical order and patient records migrate and whether access is continuous during transition.
- Minimum necessary
How should my clinic limit PHI sent to Tailor Made?
Send only the PHI required for compounding and shipping — align portal users with your minimum-necessary policy and restrict EMR portal credentials to staff who need them.
- Alternative
How does Fizy Health handle patient data?
Fizy Health signs a BAA at onboarding, scopes patient records to your organization, audits patient-linked cart actions per line, and routes fulfillment to LegitScript-certified 503A partners shown per cart row.
Sources reviewed June 2026
- Tailor Made Compounding privacy policy, Quality page, and EMR prescriber portal (tailormadecompounding.com), reviewed June 2026.
- Fizy Health platform capabilities reflect the live product.
Map PHI flows — or audit every cart line.
Fizy Health scopes patient data to your organization and audits cart actions per line. Free to start.