01Privacy architecture
HIPAA Compliance
Protected health information is encrypted, access-scoped, and separated from finance review wherever the workflow does not require clinical detail.
ZeroPayHealth
Start Assessment
Portal Login
Choose your workspace
Hover to open. Sign in with the email assigned to your role.
Patient PortalReview your application status, upload records, and confirm your California consultation.Employer BenefitsTrack redirected claims, savings evidence, and compliance documents.Hospital TeamManage assigned patients, clinical milestones, medical records, and billing PDFs.Lender TeamReview verified cases, upload final agreements, and authorize funding.Claims SpecialistReconcile claim packets, final costs, and employer settlement evidence.Care ConsultantCoordinate travel support, translation review, onsite proof, and patient updates.CA OperationsRun identity verification, office appointments, and final-pass coordination.Platform AdminOpen the system control tower for governance, RBAC, and platform oversight.
Med-Fintech Trust Layer
Compliance & Security for Medical Finance.
ZeroPayHealth is designed around medical privacy, cross-border hospital diligence, and finance-grade evidence controls so patients, employers, lenders, and hospitals can trust the same corridor.
Trust Stack
Four controls behind every routed case
02Cross-border service model
Legal Structure
California operations coordinate verification and contracts while China-side delivery is supported by service capacity from three publicly listed healthcare groups.
03Credentialed hospital network
Licensing
Partner hospitals must provide nationally recognized licenses, specialty credentials, and facility-level qualification records before patient routing.
04Controlled storage and access
Data Residency
Primary platform records are retained in U.S.-controlled systems, with cross-border access limited to approved clinical and operational use.
HIPAA Compliance
Patient data is protected before finance teams ever review a case.
The workflow separates clinical need, borrower evaluation, employer savings, and claims evidence into role-specific views. That keeps the case auditable without exposing unnecessary medical detail.
Encryption in transit and at rest
Sensitive application, medical-record, and settlement data is handled through encrypted channels and encrypted storage boundaries.
Minimum necessary access
Lenders, employers, hospitals, consultants, and claims teams see only the case fields needed for their assigned workflow.
De-identification for review
Portfolio, lead-quality, and employer-facing views use aggregated or masked information when individual PHI is not required.
Audit-ready activity trail
Verification, document upload, billing review, and settlement events are logged so case history can be reconstructed during review.
Data CategoryPrimary AccessPurpose
Patient identity
CA operations
Identity verification, consent capture, office appointment
Clinical records
Hospital and authorized care team
Procedure fit, translation, treatment, discharge package
Financial profile
Lender and claims roles
Bridge-finance review, final agreement, settlement audit
Employer status
Employer benefits team
Eligibility status, savings evidence, non-clinical case progress
Legal Structure
A U.S. verification layer connected to institutional China-side service capacity.
The structure is built to avoid a vague referral chain. Each participant has a defined role, a defined permission boundary, and a documented output before the case moves forward.
California verification layer
Identity checks, background review, patient consent, and bridge-financing execution are coordinated through the California operations layer.
Three listed-company service support
China-side care coordination is supported by service capabilities across three publicly listed healthcare company systems, giving the corridor institutional depth rather than single-clinic dependency.
Role-based contract chain
Hospitals, lenders, employers, consultants, and claims reviewers operate through separate role permissions and documented handoff points.
Licensing
Hospitals are credentialed before they can bid.
Hospital onboarding emphasizes national recognition, procedure-specific qualifications, specialty operating rights, and the ability to produce billing records usable in claims review.
A hospital can be clinically excellent and still fail the corridor review if it cannot document licenses, itemized billing, translation readiness, and international patient handoffs.
Hospital operating license
Confirms the legal medical institution and permitted service scope.
Specialty department qualification
Validates that the clinical team can deliver the routed procedure category.
National or provincial recognition
Supports the use of top-tier or nationally recognized hospital capacity.
Franchise or special operating credential
Used for specialties that require additional authorization or controlled facility access.
International patient readiness
Covers translation, billing documents, medical record export, and discharge coordination.
Data Residency
Records stay governed even when care crosses borders.
ZeroPayHealth treats data movement as a controlled workflow: store the primary case file in the U.S. operating environment, grant limited clinical access when needed, and preserve a settlement-grade audit record.
U.S.-controlled primary records
Application, finance, verification, and settlement records are retained in systems controlled by ZeroPayHealth's U.S. operating layer.
Purpose-limited cross-border access
China-side partners receive only approved records needed for procedure review, treatment delivery, billing, or discharge support.
No open PHI broadcasting
Employer and lender surfaces are designed around status, eligibility, pricing, and settlement evidence rather than unrestricted clinical detail.
01
Collect
Patient consent and intake are captured before records enter the case file.
02
Minimize
Fields are reduced to the smallest useful set for each role.
03
Authorize
Access is granted by role, case assignment, and workflow stage.
04
Audit
Document movement and settlement activity remain reviewable after closure.
Compliance next step