Docuity
A suite of free, self-hostable software for small clinics — one passkey login across records, prescriptions, secure staff chat, a patient-owned record, and an ED rota tool.
- One suite
- connected clinical apps for a clinic
- 1 login
- sign in once, everywhere
- Free
- and yours to run yourself
The problem
Small practices are priced out of most clinical software. Docuity is a suite of connected services — free and self-hostable — that a small clinic can actually run, tied together by a single passkey account so staff sign in once.
What it does
Everyone signs in once, with a passkey instead of a password, and access can be switched off everywhere at once when someone leaves. The records app keeps patients, visits and notes in a form that can't be quietly changed — once a note is signed it's locked, and corrections are added on top rather than edited in secret. The prescriptions app checks a new prescription against the patient's other medicines and allergies before it's issued, and prints a proper script. And there's secure team chat, with an option to make a workspace fully private.
Galen is a patient-owned record: the patient grants and revokes role-scoped access rather than a clinic owning the chart, and a photo of a paper chart is turned into a structured draft note by Claude vision — always a draft a human reviews before it enters the record. Medrota automates an emergency department's monthly duty rota from a rules engine that encodes the department's real construction checklist, and round-trips the department's existing Excel sheet cell-for-cell.
A shared drug-interactions service backs the safety checks with a sourced dataset, and a free public drug-interaction checker is open to anyone.
Key features
One login across every app
Staff sign in once with a passkey and reach records, prescriptions and chat — no separate passwords, and access is cut off everywhere the moment someone leaves.
A record patients actually own
For patients coordinating care across several caregivers, the patient controls who can see the chart — rather than it being locked inside one clinic's system.
A photo becomes a structured note
A snapshot of a paper chart is turned into a draft clinical note in seconds — saving retyping — while a human still reviews it before it counts.
A safety check on every prescription
Before a prescription is issued, it's checked against the patient's other medications and allergies, and flags anything it can't verify rather than implying it's clear.
A month of ED shifts that builds itself
An emergency department's monthly rota is generated from the department's own rules and handed back in the exact spreadsheet they already use — turning days of work into minutes.
Free, and yours to run
The whole suite is free and self-hostable, so a small clinic isn't priced out of proper software or forced to put its patients' data on someone else's platform.
Where it stands
Positioned honestly by its own docs as 'HIPAA-informed, GDPR-aligned, self-hostable' — no formal HIPAA certification, SOC 2, or end-to-end-encryption claim beyond Chat's optional mode. Medrota's seed data is a real department's, so it's never shown publicly.
Under the hood — for the technically-minded
How it's built
Several services share one account. Docuity ID is the only place anyone signs in, so a single passkey login works across every app and access can be revoked everywhere instantly. The apps — records, prescriptions, staff chat, the patient-owned record and the ED-rota tool — are separate applications connected only by that shared identity, so one of them being compromised doesn't hand over the rest.
The clinical apps are built around a rule the whole suite takes seriously: the record keeps its word. Signing an encounter locks the note; corrections are append-only addenda or an explicit 'entered in error' flag, never a silent edit — and every read and write goes to an append-only, tamper-evident audit log.
The hard problems
One login across the suite, safely
Signing in once has to work everywhere without creating a single thing worth attacking. Each app can verify a session on its own and have it revoked instantly, and the design deliberately avoids any single component that, if breached, would let someone forge a login.
AI that structurally cannot harm a patient
Galen turns a photo of a paper chart into a structured note using Claude vision — but every AI-generated note is created as a draft that stays out of the real record until a human reviews and publishes it. The AI never writes directly into the chart.
A safety net that's honest about what it doesn't know
Rx checks every drug against every other drug and the patient's allergies before a prescription can be issued, and explicitly flags anything outside its dataset as not checked rather than implying a clean result. Every interaction entry traces to a real source — the project's own rule is that builders may not invent them.
Free and self-hostable, so no fragile dependencies
Rather than lean on a rate-limited external drug API, the interactions service ships its own versioned, sourced dataset bundled in — a deliberate choice so a clinic self-hosting the suite isn't at the mercy of a third-party endpoint.
Built with
- React Router 7
- Remix
- Prisma/Drizzle
- Postgres
- Anthropic Claude
Building something in this space?
Work with us →