Staff access, record history, data copies and support.
Five roles are available: owner, manager, funeral director, arranger and administrative staff. Administrative staff can work on case details and documents without viewing financial totals. Access can also be limited to the locations a person works.
Staff can enable two-step sign-in for their own account. An owner can require it for everyone in the firm. When required, the second step must be completed before case records and documents can be opened.
Archiving removes a case from the active list without deleting the record. Cases, contacts, documents and payments are retained. An account holding cases cannot be deleted through the product. Your firm remains responsible for its applicable retention requirements.
An owner or manager can download a complete copy from Settings: cases, contacts, contracts, payments and uploaded files, in open formats. There is no charge. If you ask us to prepare the copy instead, we send it within three business days.
If you cannot serve a family, emergency support is answered by a person at any hour. Routine support is available Monday to Friday, 08:00–18:00 Central, with a reply within one business day. During your first ninety days, all support is available at any hour.
We do not hold a SOC 2 report or publish a guaranteed uptime percentage. If your firm has specific requirements, discuss them with us before choosing the product.
We do not publish a guaranteed uptime percentage or a guaranteed recovery time. Before moving records, ask us to review the current backup and recovery arrangements with you.
Cortege does not currently hold a SOC 2 report. Tell us if one is required by your firm or insurer.
HIPAA applies to covered entities and business associates. Being a funeral home does not, by itself, establish that status. Your obligations depend on your activities and the laws that apply to your firm; confirm them with your adviser.
HHS: Covered entities and business associatesIf you need more detail or have a security questionnaire, contact us before making a decision.
The database checks access using the staff member’s role and location. These checks apply beneath the interface. Automated database tests check that one firm cannot read another firm’s records.
Changes to cases, contacts, payments and documents are recorded with the person and time. The audit entry and change are saved together. Entries identify the fields changed without copying their values. Staff, including the account owner, cannot edit or remove audit entries.
A decedent’s social security number is held separately from the case data served to the application. A person must ask to see it; asking records their identity and the time in the audit trail. Cause of death remains part of the case. Neither field is included in product emails or diagnostic logs.
Families pay on Stripe’s checkout page. Cortege does not receive their card numbers. Your firm uses its own Stripe account and receives payments directly.