Docuity
A suite of free, self-hostable software for small clinics: one passkey login across records, prescriptions, secure staff chat, a patient-owned record, and an ED rota tool.
- One suite
- connected clinical apps for a clinic
- 1 login
- sign in once, everywhere
- Free
- and yours to run yourself
The problem
Small practices are priced out of most clinical software. Docuity is a suite of connected services, free and self-hostable, that a small clinic can actually run, tied together by a single passkey account so staff sign in once.
What it does
Everyone signs in once, with a passkey instead of a password, and access can be switched off everywhere at once when someone leaves. The records app keeps patients, visits and notes in a form that can't be quietly changed: once a note is signed it's locked, and corrections are added on top rather than edited in secret. The prescriptions app checks a new prescription against the patient's other medicines and allergies before it's issued, and prints a proper script. And there's secure team chat, with an option to make a workspace fully private.
Galen is a patient-owned record: the patient grants and revokes role-scoped access rather than a clinic owning the chart, and a photo of a paper chart is turned into a structured draft note by Claude vision, always a draft a human reviews before it enters the record. Medrota automates an emergency department's monthly duty rota from a rules engine that encodes the department's real construction checklist, and round-trips the department's existing Excel sheet cell-for-cell.
A shared drug-interactions service backs the safety checks with a sourced dataset, and a free public drug-interaction checker is open to anyone.
Key features
One login across every app
Staff sign in once with a passkey and reach records, prescriptions and chat: no separate passwords, and access is cut off everywhere the moment someone leaves.
A record patients actually own
For patients coordinating care across several caregivers, the patient controls who can see the chart, rather than it being locked inside one clinic's system.
A photo becomes a structured note
A snapshot of a paper chart is turned into a draft clinical note in seconds, saving retyping, while a human still reviews it before it counts.
A safety check on every prescription
Before a prescription is issued, it's checked against the patient's other medications and allergies, and flags anything it can't verify rather than implying it's clear.
A month of ED shifts that builds itself
An emergency department's monthly rota is generated from the department's own rules and handed back in the exact spreadsheet they already use, turning days of work into minutes.
Free, and yours to run
The whole suite is free and self-hostable, so a small clinic isn't priced out of proper software or forced to put its patients' data on someone else's platform.
Where it stands
Positioned honestly by its own docs as 'HIPAA-informed, GDPR-aligned, self-hostable': no formal HIPAA certification, SOC 2, or end-to-end-encryption claim beyond Chat's optional mode. Medrota's seed data is a real department's, so it's never shown publicly.
Under the hood: for the technically-minded
How it's built
Several services share one account. Docuity ID is the only place anyone signs in, so a single passkey login works across every app and access can be revoked everywhere instantly. The apps (records, prescriptions, staff chat, the patient-owned record and the ED-rota tool) are separate applications connected only by that shared identity, so one of them being compromised doesn't hand over the rest.
The clinical apps are built around a rule the whole suite takes seriously: the record keeps its word. Signing an encounter locks the note; corrections are append-only addenda or an explicit 'entered in error' flag, never a silent edit. And every read and write goes to an append-only, tamper-evident audit log.
The hard problems
One login across the suite, safely
Signing in once has to work everywhere without creating a single thing worth attacking. Each app can verify a session on its own and have it revoked instantly, and the design deliberately avoids any single component that, if breached, would let someone forge a login.
AI that structurally cannot harm a patient
Galen turns a photo of a paper chart into a structured note using Claude vision, but every AI-generated note is created as a draft that stays out of the real record until a human reviews and publishes it. The AI never writes directly into the chart.
A safety net that's honest about what it doesn't know
Rx checks every drug against every other drug and the patient's allergies before a prescription can be issued, and explicitly flags anything outside its dataset as not checked rather than implying a clean result. Every interaction entry traces to a real source: the project's own rule is that builders may not invent them.
Free and self-hostable, so no fragile dependencies
Rather than lean on a rate-limited external drug API, the interactions service ships its own versioned, sourced dataset bundled in, a deliberate choice so a clinic self-hosting the suite isn't at the mercy of a third-party endpoint.
Built with
- React Router 7
- Remix
- Prisma/Drizzle
- Postgres
- Anthropic Claude
Building something in this space?
Work with us →