Patient relationship management
Patient management, under a signed BAA
Recall, reactivation and reminders in one platform — with the agreement in place before any patient data moves
BAA signed first
15+ tools in one
From $499/mo
A PRM is a CRM that respects the rules you work under
Everything a good CRM does — pipelines, messaging, automation, scheduling, payments, reporting — configured for a practice: minimum-necessary access, logged activity, message templates that keep clinical detail out of a text, and a BAA covering the data we hold. Same capability, deployed so it doesn’t create a problem you have to explain later.
secure by design
Built for your practice
Everything a modern practice runs on
From first inquiry to the follow-up visit — every tool your front desk and providers touch, working together and kept secure.
Patient pipeline
- Visual intake-to-visit pipelines with custom stages
- Lead scoring, tagging & smart patient lists
- Opportunity tracking & activity logs
- Notes, mentions & secure team collaboration
Secure communication
- Two-way SMS & email in one unified inbox
- AI chat widgets & website chat-to-text
- Voice calling with recording & tracking
- Missed-call text-back & social DMs
Automated workflows
- Drag-and-drop workflow builder
- Automated SMS, email, voicemail & call sequences
- Trigger-based rules & if/then logic
- Automated recalls & no-show recovery
Scheduling & telehealth
- Multi-location, multi-provider calendars
- Online booking with automated reminders
- Google & Outlook sync, deposits before booking
- HIPAA-friendly telehealth (with add-ons)
Intake forms & funnels
- Drag-and-drop form & funnel builder
- Conditional, multi-step & conversational intake
- Landing-page builder with A/B testing
- Custom domains & fast, hosted pages
Reviews & reputation
- Automated Google review requests
- AI-assisted replies & response templates
- Review monitoring dashboard
- Negative-review filtering alerts
Patient email
- Campaign builder & template library
- Drag-and-drop editor & scheduling
- Personalized merge fields & smart send times
- Deliverability optimization
Payments & invoicing
- Built-in payment processing & invoicing
- Subscriptions & recurring billing
- Payment links & automated reminders
- Failed-payment recovery flows
Practice analytics
- Lead-source attribution & ROI by campaign
- Call, text & email analytics
- Conversion & funnel performance
- Appointment & show-rate reporting
Programs & courses
- Online course & program builder
- Membership & subscription access
- Drip content for patient education
- Progress tracking
Practice on the go
- Full access from the mobile app
- Call & text patients from anywhere
- Push notifications
- Task management on the move
Your brand, white-labeled
- Full platform white-labeling
- Custom domain & practice branding
- White-label mobile app (upgrade)
- Group & multi-clinic licensing
Roles & audit control
- User roles, permissions & team management
- Activity audit logs
- Custom dashboards & file storage
- Developer API access
Practice marketing
- Built-in social media scheduler
- Ads reporting for Google, Meta & TikTok
- AI content for posts, emails & SMS
- Lead-source tracking
Integrations
- Native & third-party integrations
- Webhooks & Zapier support
- AI-agent integrations
- Telephony integrations
Do the math
One secure platform, not fifteen bills
Practices usually buy each of these tools separately — then stitch them together and hope they stay compliant. Here's the stack, what it costs on its own, and what it costs together.
What it replacesTypicalIn
CRM & pipeline management$99/mo
Unlimited sales funnels$297/mo
Website builder$29/mo
Surveys & intake forms$49/mo
Email marketing$99/mo
Two-way SMS marketing$99/mo
Booking & appointments$29/mo
Workflow automations$169/mo
Courses & programs$99/mo
Call tracking$49/mo
Reputation management$159/mo
Tracking & analytics$299/mo
Communities$89/mo
Document signing$47/mo
Mobile app$499/mo
HIPAA compliance$299/mo
Buying it all separately: $2,310/mo
All included from $499/mo
Save over $1,800 every month
One platform under one BAA, one bill, one team that knows your practice — instead of fifteen logins to keep secure.
Price it for your practice
The honest version
No platform can make your practice HIPAA compliant
Every PRM vendor puts “HIPAA compliant” on the box. It's a claim about software that describes an obligation belonging to you — and that gap is how practices get caught out. Here's the split, plainly.
What we're responsible for
- A signed BAA — in place before any patient data enters the system. Without one, no vendor can lawfully handle PHI on your behalf.
- Encryption in transit and at rest for the data we hold.
- Role-based access configured to minimum necessary — not full visibility for everyone by default.
- Audit logging, so you can see who accessed what and when.
- Immediate access revocation when a staff member leaves.
- Message templates built so clinical detail can't accidentally end up in a text.
- Breach notification to you, on the timelines the BAA sets out.
What stays yours
- Your risk analysis and security policies — a HIPAA requirement no vendor performs for you.
- Workforce training and sanctions for staff who mishandle data.
- Deciding who gets access to what, and reviewing it.
- Patient consent for the communication channels you use.
- Notifications required under the Breach Notification Rule.
- What your team actually types — no configuration prevents someone putting a diagnosis in a message if they're determined to.
On texting patients
Standard SMS is not a secure channel. Appointment reminders and administrative messages are generally fine with the patient's agreement and clinical detail left out — that's how nearly every practice operates. Anything clinical belongs in a secure message or a phone call. We build the templates so the safe path is also the easy path, because a policy your front desk has to remember at 4:55pm on a Friday is not a control.
Reviews, done safely
Ask every patient — filtering for happy ones breaches the FTC review rule. Replies never confirm someone was a patient, even if they said so first.
Recall & reactivation
Usually the highest-return thing a practice switches on. Treatment messages and marketing sit differently under HIPAA and TCPA, so we separate them and record consent.
Practice reporting
Bookings, show rate, recall performance and referral sources — live, without exporting anything.
Your EHR stays put
This isn't a clinical system of record. It handles everything around it — enquiries, intake, scheduling, recall, reputation.
We build with compliance in mind and work alongside your compliance lead and counsel — we don't provide legal advice or guarantee regulatory compliance. Reference: HHS guidance on business associates · HHS Breach Notification Rule.
The patients you already treated are the cheapest ones to see again
Recall is the appointment book's quietest problem and its fastest fix
Good questions
Corunit PRM, answered
Bring your compliance lead to the walkthrough. The questions they ask are the ones worth answering.
Does a platform make our practice HIPAA compliant
No — and be careful with any vendor who implies otherwise. Compliance is a property of your practice's whole programme: policies, training, risk analysis, workforce controls. What a vendor can do is sign a BAA, encrypt and control access to the data it holds, log activity, and be configured so PHI doesn't end up somewhere it shouldn't. We do those things. The programme around them stays yours.
Do you sign a BAA
Yes. A signed Business Associate Agreement is in place before any protected health information enters the system. If a vendor won't sign one, they can't lawfully handle PHI on your behalf — whatever their marketing page says.
Is it safe to text patients
For appointment reminders and administrative messages, generally yes — with the patient's agreement and clinical detail left out. Standard SMS isn't a secure channel, so anything clinical belongs in a secure message or a phone call. We configure templates so staff can't accidentally put a diagnosis in a text.
What about asking patients for reviews
You can ask — and you should ask everyone rather than filtering for happy patients, because selective solicitation breaches the FTC review rule. What you can't do is confirm in a public reply that someone was a patient, even if they said so first. Our response templates thank the reviewer and move the conversation offline.
Does this replace our EHR
No. Your electronic health record is the clinical system of record and stays exactly where it is. Corunit PRM handles everything around it: enquiries, intake, scheduling communication, recall, reactivation and reputation. Where an integration exists we connect them so the front desk isn't double-entering.
Who can see patient information
Only the people you authorise. Access is role-based, activity is logged, and access can be revoked immediately when someone leaves. Minimum necessary is a HIPAA principle, not a preference — so we configure roles to it rather than giving the whole team full visibility by default.
What happens if there's a breach
The BAA sets out notification obligations and timelines. Practically: we notify you promptly, help establish what was affected, and support your analysis. Your practice remains responsible for any notifications required under the Breach Notification Rule — and we'd rather you knew that now than discovered it during an incident.
Can we run recall and reactivation campaigns
Yes, and it's usually the highest-return thing a practice can switch on, because those patients already chose you once. Treatment and appointment communications sit differently from marketing under both HIPAA and TCPA, so we separate the two and record consent appropriately.
How long does implementation take
Typically two to four weeks: BAA signed first, then pipeline and calendar configuration, intake forms, message templates reviewed by your compliance lead, migration, and front-desk training. We don't switch on automation until the templates have been approved.
Schedule your free consultation
See it built around your practice
Let's connect and tailor a demo to how your practice runs — secure data handling, real-time analytics, and automated reminders that free your team to focus on patients. Built for healthcare professionals, with nothing to lose.
+1 855-969-5577
ray@corunit.com
BAA signed first