Skip to content
Insight Notes
Menu

Reports

The numbers, without handing over the chart.

Twenty-four reports across income, attendance, documentation and claims. A report is a bulk operation, and bulk output is the usual way a sensitive record leaks — so most of the thinking here went into who sees which rows.

Minimum necessary

Being allowed to see the money is not being allowed to see everybody.

Permission to run financial reports and permission to see a client are different grants, and software that treats them as one lets a clinician confined to their own caseload export the name, address, telephone number and insurance member ID of every client in the practice. So the line is drawn at rows that name a person.

Rows that name somebody

Narrowed to your caseload

Fourteen of the twenty-four name a client on every line — the roster, attendance, outstanding balances, claims, unbilled sessions. Each runs through the same narrowing the client list and the calendar already use, so a report cannot show you somebody the rest of the product will not.

Clients with restricted access are excluded from all of them by construction, rather than by whoever runs the report remembering.

Rows that name nobody

Left whole on purpose

Income, the appointment mix, claim and remittance totals: these name no individual, and seeing them is the entire point of being given the permission. Narrowing them would answer a different question than the one asked and would quietly misreport the practice.

The headline figure is computed with the same filters as the table beneath it. A total over the whole practice above rows narrowed to one payer is a number the table cannot support.

Reports
Which report to show

The audit

Two different events, not one

Running a report that names people is recorded as a different kind of event from running one that does not. Somebody looking at the appointment mix and somebody pulling a spreadsheet of every client's details are not the same act, and one entry covering both would make them impossible to tell apart afterwards.

The queries

Nothing is assembled from input

Every query is written by hand and scoped to the practice. There is no generated SQL and no filter a caller can inject — the only choices are which report and over what period.

The list

You are not offered what you cannot run

The catalogue is filtered by what the person looking is permitted to run, so absence from the list is an authorization decision rather than a menu item that fails when clicked.

The caller

Never a default that widens

Whose caseload a report runs as is a required answer, not one that falls back to the whole practice when nobody supplies it. A safe path that depends on remembering is not a safe path.

What the twenty-four actually cover.

Income and how it is allocated, outstanding balances and invoice aging, the appointment mix and attendance, documentation compliance, provider productivity, the client roster and demographics.

And the claims side in its own right: outstanding and filed claims, claim aging, underpaid claims, insurance payments, unbilled and unpaid sessions, authorization utilization, revenue cycle, and a Washington L&I compliance report.

How claims are tracked

Start with the week you are already having.

Set up a practice, put a real week in the calendar, and see whether it fits before you move anything across.