Getting started with Cloud Content

Moraph resells, implements and runs Box for Healthcare as the place your organization keeps unstructured content: research files, policies, committee papers and documents shared with partners. We configure Box for your folder structure, sharing rules, classification and retention, move content in from file shares, and handle administration and support. Box provides the platform under its business associate agreement with you; Moraph operates it under ours; your organization decides who may see and share what.

What it is for

Healthcare organizations keep large amounts of content outside the EHR: research data and papers, policy and procedure documents, committee minutes, contracts and files exchanged with partners. Much of it sits on aging file shares, in personal cloud accounts or in email attachments, where nobody can say who has access, what holds patient information, or how long it is kept. A HIPAA-capable content platform helps only when it is configured with sensible sharing rules, retention and classification, and when someone looks after it day to day.

• Documents that may contain PHI are spread across file shares, email and personal accounts
• External sharing with researchers and partners is hard to see and harder to revoke
• Retention and legal holds are applied by hand, if at all
• Nobody owns day-to-day administration, access reviews and user support

Who uses it

• IT and infrastructure leaders at hospitals, health systems and academic medical centers
• Research administrators and investigators who share files with outside collaborators
• Privacy and compliance officers responsible for where PHI is stored and shared
• Records managers and legal teams who set retention and legal holds
• Policy and quality teams who publish and maintain controlled documents

Before you start

• Your organization uses Cloud Content as a managed platform from Moraph, under an agreement that covers it.
• Licences for Box for Healthcare, bought through Moraph or under your own agreement with the vendor.
• A Moraph account in your organization for each person who works with Moraph on the service.
• Named technical and security contacts, recorded in the Moraph Portal.

Steps to get started

1. Agree the scope of the managed service for Cloud Content with Moraph, including which environments and teams it covers.

2. Name your administrators, technical contact and security contact in the Moraph Portal under People and access.

3. Review the configuration baseline Moraph proposes for your regulations, and record any changes you need.

4. Confirm how users will sign in, through your identity provider where the platform supports it.

5. Agree the pilot group and the cut-over plan with your Moraph delivery lead.

Where to go next

• Onboard Cloud Content
• Everyday tasks
• Connect your systems
• Security, data and compliance
• Troubleshooting and the support guide
• Product overview on moraph.com