30
Live in 30 days, or your first month is free.
We commit to a go-live date in your kickoff call. Miss it and your first month is on us — written into every contract.
Built for healthcare — and nothing else
Employee health management, purpose-built for healthcare.
The single HIPAA-aligned platform for employee health records, OSHA 300/300A/301 filings, post-exposure follow-up, and a full employee portal. Go live in 30 days — or your first month is free.
Live in 30 days, guaranteed · Free data migration · No seat tax — unlimited users
carefoundry.app/dashboard
The carefoundryESC promise
Three things every customer gets in writing.
$0
Free data migration, every time.
We move your employees, incidents, immunizations, and credentials from spreadsheets or any legacy system — no migration fee on an annual plan.
∞
No seat tax. Unlimited users.
Every admin, manager, nurse, and employee-portal account is included in your plan. You never pay more as your team grows.
A modern alternative to legacy occupational-health systems
HIPAA-aligned
OSHA 300 / 300A / 301
Encrypted & secure
Full audit trail
Enterprise-ready
Everything in one place
The occupational health platform
The occupational health platform
your team actually needs.
From first-day physicals to year-end OSHA filings, carefoundryESC handles the full lifecycle of employee health — without the paperwork.
Complete Health Records
Track every health touchpoint across 12 modules — exams, immunizations, incidents, exposures, vitals, leaves, and more — all attached to a single employee record.
Scheduling & Reminders
Calendar view per organization with a full scheduled → complete / cancelled / no-show lifecycle. Automated and manual email reminders reduce no-shows.
OSHA 300 / 300A / 301
Incidents auto-classify into the 300 log. Form 300A summaries and per-incident 301s generate in their legally-mandated layout — ready to post by February 1.
E-Signature Documents
Upload policies and consent forms once. Assign to any employee or group. Collect typed e-signatures via secure token links — no login required to sign.
Employee Self-Service
A dedicated portal lets employees view their own health records, upcoming appointments, and expiring credentials — reducing admin load on your OH team.
40+ Built-in Reports
Immunization compliance, incident summaries, exam history, roster demographics — every report renders cleanly and exports to Excel or PDF on demand.
- Health activity modules
-
12Health activity modules
- Built-in report types
-
40+Built-in report types
- OSHA forms generated
-
3OSHA forms generated
- Role-based access levels
-
5Role-based access levels
30-day onboarding
Go live in 30 days — with a written timeline from day one.
No open-ended implementation. No 6-month rollouts. Your kickoff call includes the exact dates for each milestone below. Miss any of them, and the next month is on us.
1
Day 0
Kickoff + success plan
A 45-minute call confirms your go-live date, champion, and data sources.
2
Day 1–7
Data migration
We export your employees, incidents, immunizations, and credentials from any source — included free.
3
Day 8–14
Admin training
Two 60-minute sessions cover daily workflows, reports, and the e-sign document flow.
4
Day 15–21
Portal rollout
Welcome emails go out. Employees log in, sign policies, and see their own records.
5
Day 22–30
Go-live + first OSHA run
Your first live 300/300A/301 is generated from real data. Support stays on standby for 60 days.
Not live on day 30? Your first month is free — guaranteed in writing.
Employee records
Every health event, on one employee record.
Stop hunting across spreadsheets and paper files. carefoundryESC centralizes every health activity for each employee — with sensitive data masked by default and revealed only when a user explicitly asks.
- 12 health activity categories, all searchable and filterable
- Sensitive personal details stay hidden by default and appear only when needed
- Bulk Excel import and individual or batch portal provisioning
- Photo upload, department, manager, and employment details
- Full audit log of every create, update, and delete
12 Health Activity Modules
Every clinical workflow, covered.
From routine immunizations to complex incident investigations with root-cause analysis — every module shares the same list → detail → edit pattern, so staff learn the system once.
Examinations
Medical exams with lab panels and clearance tracking
Immunizations
Vaccine tracking with consent and decline records
Incidents
Workplace injuries with OSHA classification, RCA, and costs
Exposures
Bloodborne pathogen and chemical exposures with follow-up
Treatments
Medical treatments log with provider and outcome notes
Health Conditions
Ongoing conditions with risk level and management notes
Leaves
Sick leave, FMLA, and LOA with start / end tracking
Vitals
BP, HR, temperature, height, and weight over time
Credentials
Certifications and licenses with expiry alerts
Work Restrictions
Post-injury job restrictions with duration and scope
Record Requests
Follow-up visit requests and employee-initiated inquiries
Attachments
Supporting documents, lab results, and imaging, per-record
29 CFR 1904 · OSHA Recordkeeping
Year-end reporting,
Year-end reporting,
without the year-end panic.
carefoundryESC generates all three required OSHA recordkeeping forms directly from your incident data. No manual tallying, no reformatting — just accurate forms, ready to post by February 1 and submit through the ITA portal.
300
Log of Work-Related Injuries and Illnesses
Running log of all recordable incidents throughout the year, automatically populated from incident records.
300A
Summary of Work-Related Injuries and Illnesses
Annual summary for posting February 1 through April 30, with hours-worked data and case totals.
301
Injury and Illness Incident Report
Per-case narrative form generated directly from each incident record — including privacy-case handling.
Free tool · no account required
Need your OSHA 300A by February 1? Generate one in 60 seconds.
Upload your incidents as a CSV. We'll produce a formatted 300A summary PDF — ready to post, print, or submit through the ITA portal. Works with any format, including a spreadsheet export from whatever system you're using today.
OSHA Form 300A — 2026
Ready
- Total cases
- 12
- Days away
- 186
- Days restricted
- 41
- Injuries
- 9
- Skin disorders
- 1
- All other illnesses
- 2
Incident rate
4.32 per 100 FTE
Never miss a deadline
Your compliance year, in one view.
Every OSHA, CMS, and Joint Commission deadline that matters to occupational health — each one a single click inside carefoundryESC.
Feb 1
OSHA 300A posted
Annual summary posted in the workplace through April 30. Generated from your incident data in one click.
Mar 2
ITA electronic submission
Establishments with 20+ employees in certain industries submit 300A data through the OSHA Injury Tracking Application.
Annually
TB screening cycles
New-hire baseline and annual retesting per CDC guidance. Auto-enrol employees by job role.
Annually
Respirator fit testing
OSHA 1910.134 requires annual fit tests for every respirator user. Due dates tracked per employee.
Sep–Oct
Flu season preparation
Consent forms loaded, reminders scheduled, decline workflow ready — all before peak vaccination weeks.
Ongoing
Post-exposure follow-up
Baseline, 6-week, 3-month, and 6-month serial testing auto-scheduled when a bloodborne pathogen exposure is logged.
Ongoing
Credential expiry
Licences and certifications tracked per employee with advance-notice alerts.
Survey window
JCAHO / CMS survey ready
Audit log exports, immunization rosters, and OSHA filings ready on demand for any surveyor.
Employee portal
Give employees visibility into their own health records.
A dedicated, permission-scoped portal reduces the volume of records requests your occupational-health team fields each week. Employees log in and see exactly what they need — nothing more.
- View their own health records, organized by category
- See upcoming appointments and full visit history
- Sign assigned policy documents and consent forms online
- Update their own contact information — with an audit trail
- Receive automated reminders before required activities
Built for every role
One platform, five user types.
Role-based access, scoped per organization, ensures every user sees exactly what they need — and nothing they shouldn't.
Super Admin
Provisions organizations, impersonates users for support
Organization Administrator
Full access within their organization; manages staff and settings
OH Nurse / Manager
Creates and edits records, schedules exams, runs reports
Clinic Staff
Logs health activities and views assigned employee data
Employee
Portal-only access to their own records and documents
Focus is a feature
Built for healthcare.
Built for healthcare.
Nothing else.
Most occupational-health platforms are sprawling EHS suites built for oil & gas, manufacturing, and mining — with healthcare bolted on. Their breadth is their weakness: slow rollouts, bloated interfaces, and price tags that reflect features your team will never touch.
carefoundryESC exists to do one thing well: run employee health for hospitals, clinics, and long-term care. Every module, every report, every workflow was designed with your occ-health nurse at the keyboard.
- Every module maps to a real occupational-health workflow — not an industrial-safety checklist.
- The codebase is shared across every customer, so improvements ship to everyone at once.
- Your staff learn the system in hours, not weeks, because every screen follows the same pattern.
What we deliberately don't do
These belong in other tools. Keeping them out of carefoundryESC is what makes it fast, simple, and affordable.
- Environmental sustainability and carbon-emission tracking
- Quality management systems and ISO-9001 workflows
- Chemical inventory and safety-data-sheet management
- Industrial hygiene air-sampling and exposure registries
- Full learning-management systems (we integrate with yours)
- Ergonomics motion-capture and job-safety-analysis tooling
If your next vendor needs to do all of the above, you're not our customer — and we'd rather tell you honestly than sell you something you don't need.
“We went from three weeks of OSHA 300A prep to one morning. The first year paid for the platform twice over in staff time alone.”
Director of Employee Health
·
Mid-size specialty hospital
Security & privacy
The posture your IT reviewer will ask about.
We answer security questionnaires in 48 hours, not three weeks. Here's what goes on them.
Encryption
AES-256 at rest. TLS 1.2+ in transit. PII (name, SSN, DOB, address, phone) encrypted field-level in the database.
HIPAA posture
Signed BAA available on request. PHI access gated by role, audited per request, and masked by default across every screen.
Audit trail
Every create, update, and delete recorded with user, IP, and timestamp. Exportable as a tamper-evident PDF for JCAHO and CMS surveys.
Access controls
Five role levels plus per-field permissions. Per-organization data isolation enforced at the database query layer — not the UI.
SOC 2 Type I
In progress · 2026
BAA
Available at contract
Encryption at rest
AES-256
Encryption in transit
TLS 1.2+
The numbers
Written into every contract.
- HIPAA incidents
-
0HIPAA incidentsSince launch — and the BAA is in writing.
- On-time go-lives
-
100%On-time go-livesEvery customer live within 30 days, or they paid nothing that month.
- Average migration
-
14 dAverage migrationFrom spreadsheet or legacy system to production data.
- Security questionnaire turnaround
-
48 hSecurity questionnaire turnaroundIT reviewers stop waiting on us.
Two ways to start
Try it, or switch — we'll meet you where you are.
30-day paid pilot
Prove it with a pilot.
$1,500
one-time · credited to your annual plan
- One department or facility, up to 50 employees
- Full feature access — no crippled-trial asterisks
- Free data migration from whatever you use today
- Go-live inside 30 days or the pilot is refunded in full
- 100% of the pilot fee credited when you sign an annual contract
Switch from your current system
Already paying for something else?
Forward us your current renewal invoice. We'll take 20% off your first year, complete a full data migration before your current contract ends, and your staff won't lose a single record.
- 20% off year 1 when you forward a current renewal invoice
- Full migration of employees, incidents, immunizations, credentials, documents
- Parallel run for 30 days — we run alongside your current system before cutover
- No migration fee, no implementation fee, no professional-services line item
- If we miss the cutover date, we extend the discount into year 2
Straight answers
Frequently asked questions.
Everything your procurement, IT, and compliance teams will ask — answered up front so you don't have to.
Every contract commits to a go-live date inside 30 days of kickoff. We migrate your data, train your admins, roll out the employee portal, and generate your first live OSHA report inside that window. If we miss the date, your first month is free.
Yes. A signed Business Associate Agreement is available on request and delivered with every annual contract. PHI is encrypted at rest (AES-256) and in transit (TLS 1.2+), masked by default across the interface, and access is recorded in a tamper-evident audit log.
Yes — included free on every annual plan. We handle employees, incidents, immunizations, exams, credentials, and documents from CSV exports, spreadsheets, or direct exports from any prior system. Typical migration completes in 14 days with a 48-hour rollback window.
Scheduled CSV imports work on day one from any HRIS via SFTP or drop folder. Direct SCIM v2 connections to Workday, UKG, ADP, and Paylocity are on our near-term roadmap. If you need a specific integration before it ships, we build the top customer request every quarter.
No seat tax. Every admin, manager, nurse, and employee-portal account is included in your plan. Pricing is tier-based on your active employee headcount, published openly, and every tier includes all 12 modules, all reports, unlimited users, and free data migration.
One-click export to portable CSV plus PDFs of every audit record. We retain 60 days of encrypted off-site backups after contract end, then a signed certificate of deletion. You take everything with you — no lock-in, no "export fee."
Local MFA is available today; SAML 2.0 and OIDC (Azure AD, Okta, Google Workspace) are shipping in our next enterprise release. Until then we lock pricing for customers who need to wait for a specific release.
We answer security questionnaires in 48 hours — not three weeks. A full security and compliance one-pager is ready to hand to your reviewer before our first call, and we have pre-filled responses to the most common procurement questionnaires in healthcare.
Question not answered here? Ask it on your discovery call — 20 minutes, no slides.
See your first OSHA 300A generated
in a 20-minute demo.
No slides, no 90-minute overview. We'll use your real data shape, walk through an incident-to-300A flow, and answer every IT and compliance question on the same call.
Live in 30 days · Free data migration · No seat tax · BAA available