Healthcare · Managed platform
Policy Management
One current, approved version of every hospital policy, with a record of staff attestations
Overview
Moraph resells, implements and runs RLDatix's policy management platform as the single place your hospital keeps its policies and procedures. The platform routes each new or revised policy through the approvals your governance requires, prompts owners when a review falls due, and collects staff attestations. Moraph migrates your existing documents, configures the approval routes and review cycles, keeps the platform running, and prepares the evidence surveyors and auditors ask for.
The problem it solves
Hospital policies often live in shared drives, intranet pages and binders, with several versions of the same document in circulation. Staff cannot tell which one is current, owners miss their review dates, and approvals are tracked by email. When a surveyor asks for the policy in force on a given date, who approved it and whether staff were told about the change, the policy office spends days reconstructing the answer.
Who it’s for
- Policy coordinators and accreditation managers at hospitals and health systems
- Compliance, quality and risk leaders who answer for policy governance
- Department leaders and policy owners who write and review policies
- Medical staff offices and committees that approve clinical policies
- Nurse leaders who need staff to know and follow current procedures
How the work flows
- Write and reviseOwners draft new policies and revisions in the platform, from your templates, with the earlier version kept and changes visible to reviewers.
- ApproveEach policy follows the approval route your governance sets, by department, policy type or committee, and the approvals are recorded with names and dates.
- Communicate and attestWhen a policy that staff must know changes, an attestation is sent to the people it affects, and acknowledgments are tracked until complete.
- Review and evidenceOwners are prompted when a review falls due, overdue reviews are escalated, and the policy office can show any policy as it stood on a past date.
What it does
- Single policy library
- One searchable place for current policies and procedures, organized by department, facility and topic, with only the approved version visible to staff.
- Version control
- The platform keeps every earlier version with its approvals and effective dates, so the policy in force on a past date can be shown.
- Approval routes
- Moraph configures approval routes by policy type, department and committee from your governance rules, and keeps them current as committees change.
- Review reminders
- Owners are reminded before a review falls due, and overdue reviews are escalated to the policy office.
- Attestation campaigns
- Staff acknowledge new and changed policies, with outstanding acknowledgments tracked and followed up through managers.
- Standards cross-reference
- Policies can be linked to the accreditation standards and regulations they address, so the policy office can find what supports each one.
- Document migration
- Moraph migrates existing policies from shared drives and intranet pages, removes duplicates with your owners and records each document's current approval status.
- Templates and formatting
- Your policy template and formatting standard are applied to new policies and to migrated documents.
- Multi-facility structure
- System-wide and facility-specific policies are kept separately, so each facility sees what applies to it.
- Staff search access
- Staff find policies through single sign-on or a link from your intranet, without needing an editing account.
- Survey readiness
- Moraph prepares evidence of approvals, review status and attestations ahead of surveys and on request.
- Monthly service review
- Each month Moraph reports on overdue reviews, approvals waiting, attestation progress, changes made and platform notices.
Who uses it
- Staff member
- Searches and reads current policies and completes attestations
- Policy owner
- Drafts and revises the policies they are responsible for and reviews them on schedule
- Approver
- Approves or returns policies in their route, individually or as a committee
- Policy coordinator
- Runs the policy program, manages routes and attestations and follows up overdue reviews
- Moraph service team
- Configures and runs the platform, migration and reporting under change control
- Auditor (read-only)
- Reviews policies, version history and attestations without changing them
Integrations
- Single sign-on
- Staff and owners sign in through your identity provider (SAML), so your password and multi-factor policies apply.
- Intranet and EHR links
- Links to the policy library, or to individual policies, placed on your intranet and other staff-facing systems, where those systems allow it.
- HR directory
- Staff, department and manager data used to target attestations and follow up outstanding acknowledgments.
- Learning management
- Attestations or related training can be assigned through your learning platform, including Moraph's managed Learning Management service.
- Document sources for migration
- Existing policies from shared drives, intranet sites and document systems, migrated once during implementation.
- Service desk
- Change requests and access problems tracked in Moraph's service desk, with your ticketing system connected where agreed.
Security
- Single sign-on
- Everyone signs in through your identity provider, so your password and multi-factor policies apply.
- Role-based access
- Staff see only approved policies; drafts, archived versions and approval comments are limited to the roles that need them.
- Controlled Moraph access
- Moraph staff use named accounts with the access your organization authorizes, and changes are made through approved change requests.
- Audit trail
- Edits, approvals, publications and attestations are recorded with who did them and when.
- Encryption and keys
- Data Moraph holds for the service, such as migration files and evidence exports, is encrypted with keys staff cannot use without explicit, time-bound authorization.
- No patient information by design
- Policies should not contain patient information, and migration checks flag documents that appear to. Where your use involves protected health information, a business associate agreement is put in place first.
Hosting and deployment
- New RLDatix subscription
- Moraph resells the subscription and runs the platform from implementation onward.
- Your existing subscription
- Where you already license the RLDatix platform, Moraph takes over configuration and operation, subject to the vendor's terms.
- Alongside other Moraph services
- Can be run with Moraph's managed Learning Management service so changed policies are assigned for attestation or training.
Implementation
- Governance workshop
- We document your policy governance with the policy office: policy types, owners, approval routes, committees, review intervals and attestation rules.
- Inventory and cleanup
- We inventory existing policies across drives, intranet pages and binders, and owners decide which are current, which merge and which retire.
- Migration
- Current policies are migrated with their known approval and review dates, formatted to your template and checked by their owners.
- Configuration
- Routes, review intervals, roles, facility structure and attestation settings are configured and tested with sample policies.
- Sign-on and links
- Single sign-on is connected and links are placed on your intranet so staff can reach the library from where they work.
- Go-live and handover
- Owners, approvers and coordinators are shown their own tasks, old locations are withdrawn by agreement, and the monthly service review begins.
What it doesn’t do
- Moraph is not the vendor. RLDatix owns and operates the platform, and its own service commitments, roadmap and outages apply.
- Licences are subject to RLDatix's terms, and the features available depend on the edition and modules you license.
- Moraph does not write, approve or take responsibility for the content of your policies; owners and approvers remain accountable for them.
- Moraph does not give legal or accreditation advice. Linking policies to standards helps find gaps, but deciding what a standard requires is your organization's judgment.
- Migration quality depends on the source documents. Approval history that was never recorded cannot be recreated and is marked as unknown.
- A downtime copy of critical policies under your business continuity plan remains your organization's responsibility.
- First-line help for staff stays with your service desk or policy office, with Moraph providing second-line support.
- The service is not an incident reporting or document control system for medical device or laboratory quality systems.
How to evaluate it
- Take one department's policies and review how they would be inventoried, cleaned up and migrated
- Walk a sample policy through your approval route as it would be configured
- Check that a staff member can find a current policy from your intranet in a few steps
- Ask for a sample policy history and attestation report and compare it with what surveyors ask for
- Review the responsibilities table with your policy office, compliance and IT leads
- Agree how downtime access to critical policies will be handled
Questions
We already use RLDatix for policies. Can Moraph take over running it?
Yes. Moraph reviews your current configuration against your governance documents and takes over operation, subject to RLDatix's terms for your existing licence.
Who writes and approves our policies?
Your organization does. Moraph configures the routes and reminders, but owners write the policies and your approvers decide.
What happens to our old documents?
They are inventoried and owners decide which are migrated, merged or retired. Old locations are withdrawn by agreement once the library is live.
Can staff read policies during a platform outage?
Platform availability is RLDatix's responsibility. Your business continuity plan should include a downtime copy of critical policies, and Moraph can help you set one up.
How is it priced?
Platform licences are priced by RLDatix's terms, and Moraph's implementation and managed service are quoted separately. See Working with Moraph for what drives a quotation.
Is there a business associate agreement?
Policies should not contain patient information. Where your use of the service involves protected health information, a business associate agreement is put in place first.