Skip to content

Healthcare · Managed platform

Policy Management

One current, approved version of every hospital policy, with a record of staff attestations

Overview

Moraph resells, implements and runs RLDatix's policy management platform as the single place your hospital keeps its policies and procedures. The platform routes each new or revised policy through the approvals your governance requires, prompts owners when a review falls due, and collects staff attestations. Moraph migrates your existing documents, configures the approval routes and review cycles, keeps the platform running, and prepares the evidence surveyors and auditors ask for.

The problem it solves

Hospital policies often live in shared drives, intranet pages and binders, with several versions of the same document in circulation. Staff cannot tell which one is current, owners miss their review dates, and approvals are tracked by email. When a surveyor asks for the policy in force on a given date, who approved it and whether staff were told about the change, the policy office spends days reconstructing the answer.

Who it’s for

  • Policy coordinators and accreditation managers at hospitals and health systems
  • Compliance, quality and risk leaders who answer for policy governance
  • Department leaders and policy owners who write and review policies
  • Medical staff offices and committees that approve clinical policies
  • Nurse leaders who need staff to know and follow current procedures

How the work flows

  1. Write and reviseOwners draft new policies and revisions in the platform, from your templates, with the earlier version kept and changes visible to reviewers.
  2. ApproveEach policy follows the approval route your governance sets, by department, policy type or committee, and the approvals are recorded with names and dates.
  3. Communicate and attestWhen a policy that staff must know changes, an attestation is sent to the people it affects, and acknowledgments are tracked until complete.
  4. Review and evidenceOwners are prompted when a review falls due, overdue reviews are escalated, and the policy office can show any policy as it stood on a past date.

What it does

Single policy library
One searchable place for current policies and procedures, organized by department, facility and topic, with only the approved version visible to staff.
Version control
The platform keeps every earlier version with its approvals and effective dates, so the policy in force on a past date can be shown.
Approval routes
Moraph configures approval routes by policy type, department and committee from your governance rules, and keeps them current as committees change.
Review reminders
Owners are reminded before a review falls due, and overdue reviews are escalated to the policy office.
Attestation campaigns
Staff acknowledge new and changed policies, with outstanding acknowledgments tracked and followed up through managers.
Standards cross-reference
Policies can be linked to the accreditation standards and regulations they address, so the policy office can find what supports each one.
Document migration
Moraph migrates existing policies from shared drives and intranet pages, removes duplicates with your owners and records each document's current approval status.
Templates and formatting
Your policy template and formatting standard are applied to new policies and to migrated documents.
Multi-facility structure
System-wide and facility-specific policies are kept separately, so each facility sees what applies to it.
Staff search access
Staff find policies through single sign-on or a link from your intranet, without needing an editing account.
Survey readiness
Moraph prepares evidence of approvals, review status and attestations ahead of surveys and on request.
Monthly service review
Each month Moraph reports on overdue reviews, approvals waiting, attestation progress, changes made and platform notices.

Who uses it

Staff member
Searches and reads current policies and completes attestations
Policy owner
Drafts and revises the policies they are responsible for and reviews them on schedule
Approver
Approves or returns policies in their route, individually or as a committee
Policy coordinator
Runs the policy program, manages routes and attestations and follows up overdue reviews
Moraph service team
Configures and runs the platform, migration and reporting under change control
Auditor (read-only)
Reviews policies, version history and attestations without changing them

Integrations

Single sign-on
Staff and owners sign in through your identity provider (SAML), so your password and multi-factor policies apply.
Intranet and EHR links
Links to the policy library, or to individual policies, placed on your intranet and other staff-facing systems, where those systems allow it.
HR directory
Staff, department and manager data used to target attestations and follow up outstanding acknowledgments.
Learning management
Attestations or related training can be assigned through your learning platform, including Moraph's managed Learning Management service.
Document sources for migration
Existing policies from shared drives, intranet sites and document systems, migrated once during implementation.
Service desk
Change requests and access problems tracked in Moraph's service desk, with your ticketing system connected where agreed.

Security

Single sign-on
Everyone signs in through your identity provider, so your password and multi-factor policies apply.
Role-based access
Staff see only approved policies; drafts, archived versions and approval comments are limited to the roles that need them.
Controlled Moraph access
Moraph staff use named accounts with the access your organization authorizes, and changes are made through approved change requests.
Audit trail
Edits, approvals, publications and attestations are recorded with who did them and when.
Encryption and keys
Data Moraph holds for the service, such as migration files and evidence exports, is encrypted with keys staff cannot use without explicit, time-bound authorization.
No patient information by design
Policies should not contain patient information, and migration checks flag documents that appear to. Where your use involves protected health information, a business associate agreement is put in place first.

Hosting and deployment

New RLDatix subscription
Moraph resells the subscription and runs the platform from implementation onward.
Your existing subscription
Where you already license the RLDatix platform, Moraph takes over configuration and operation, subject to the vendor's terms.
Alongside other Moraph services
Can be run with Moraph's managed Learning Management service so changed policies are assigned for attestation or training.

Implementation

Governance workshop
We document your policy governance with the policy office: policy types, owners, approval routes, committees, review intervals and attestation rules.
Inventory and cleanup
We inventory existing policies across drives, intranet pages and binders, and owners decide which are current, which merge and which retire.
Migration
Current policies are migrated with their known approval and review dates, formatted to your template and checked by their owners.
Configuration
Routes, review intervals, roles, facility structure and attestation settings are configured and tested with sample policies.
Sign-on and links
Single sign-on is connected and links are placed on your intranet so staff can reach the library from where they work.
Go-live and handover
Owners, approvers and coordinators are shown their own tasks, old locations are withdrawn by agreement, and the monthly service review begins.

What it doesn’t do

  • Moraph is not the vendor. RLDatix owns and operates the platform, and its own service commitments, roadmap and outages apply.
  • Licences are subject to RLDatix's terms, and the features available depend on the edition and modules you license.
  • Moraph does not write, approve or take responsibility for the content of your policies; owners and approvers remain accountable for them.
  • Moraph does not give legal or accreditation advice. Linking policies to standards helps find gaps, but deciding what a standard requires is your organization's judgment.
  • Migration quality depends on the source documents. Approval history that was never recorded cannot be recreated and is marked as unknown.
  • A downtime copy of critical policies under your business continuity plan remains your organization's responsibility.
  • First-line help for staff stays with your service desk or policy office, with Moraph providing second-line support.
  • The service is not an incident reporting or document control system for medical device or laboratory quality systems.

How to evaluate it

  • Take one department's policies and review how they would be inventoried, cleaned up and migrated
  • Walk a sample policy through your approval route as it would be configured
  • Check that a staff member can find a current policy from your intranet in a few steps
  • Ask for a sample policy history and attestation report and compare it with what surveyors ask for
  • Review the responsibilities table with your policy office, compliance and IT leads
  • Agree how downtime access to critical policies will be handled

Questions

We already use RLDatix for policies. Can Moraph take over running it?

Yes. Moraph reviews your current configuration against your governance documents and takes over operation, subject to RLDatix's terms for your existing licence.

Who writes and approves our policies?

Your organization does. Moraph configures the routes and reminders, but owners write the policies and your approvers decide.

What happens to our old documents?

They are inventoried and owners decide which are migrated, merged or retired. Old locations are withdrawn by agreement once the library is live.

Can staff read policies during a platform outage?

Platform availability is RLDatix's responsibility. Your business continuity plan should include a downtime copy of critical policies, and Moraph can help you set one up.

How is it priced?

Platform licences are priced by RLDatix's terms, and Moraph's implementation and managed service are quoted separately. See Working with Moraph for what drives a quotation.

Is there a business associate agreement?

Policies should not contain patient information. Where your use of the service involves protected health information, a business associate agreement is put in place first.