Compliance Framework Mapping

One Platform.
Every Framework Ohio Requires.

Judges, county contacts, and operators doing due diligence — here's exactly how SoberBase maps to ORH, NARR, DBH, ADAMHS Board, and HIPAA-grade infrastructure requirements.

Ohio Recovery Housing

ORH Certification Requirements

Ohio Recovery Housing (ORH) certifies recovery residences through RHOADS. SoberBase supports the day-to-day operations that keep operators certification-ready. The boundary is clear: RHOADS certifies. SoberBase operates.

ORH certification is issued by RHOADS — SoberBase provides the operational infrastructure to maintain it
ORH Requirement Area SoberBase Feature Covered
Documentation & Recordkeeping Resident intake records, house rules acknowledgment, signed agreements Intake Wizard + House Binder
Drug Testing Protocol Scheduled testing per certification level, chain-of-custody logging, result documentation Drug Test Scheduler + Compliance Dashboard
Curfew & Attendance Monitoring Documented daily check-ins, curfew violation records QR Check-In + Curfew Tracking
Financial Records Rent ledgers, payment receipts, fee documentation Rent Tracking + Payment History
Incident Reporting Written records of incidents, disciplinary actions, violations Incident Report Module
Staff Certification Tracking CPR/first aid records, peer recovery support certifications, expiry monitoring Staff Module + Cert Expiry Alerts
House Policy Documents Good Neighbor Policy, house rules, medication policy, grievance procedures House Binder Document Storage
Audit-Ready Export Complete, organized documentation package for certification review One-Click Compliance Export

National Alliance for Recovery Residences

NARR Standards — Levels I–IV

NARR defines four levels of recovery housing from peer-run (Level I) to clinical support (Level IV). SoberBase supports the documentation, oversight, and governance requirements across all levels where software applies.

NARR Requirement Level SoberBase Feature Covered
Resident Rights & Agreements Written agreements, house rules, grievance process I – IV Intake Wizard + House Binder
Abstinence Monitoring Substance use testing documentation and scheduling II – IV Drug Test Scheduler + Logs
Governance & Accountability Multi-house oversight, operator accountability records II – IV Org Dashboard + Multi-House View
House Rules Enforcement Documented violations, warnings, and discharge decisions I – IV Incident Module + Resident Log
Financial Accountability Program fees, resident financial obligations, receipts II – IV Rent Tracking + Payment History
Wellness Monitoring Check-in routines, daily wellness observation records III – IV Check-In Module + Wellness Logs
Medication Management MAT documentation, medication logs, policy compliance III – IV Medication Tracking Module

Ohio Department of Mental Health and Addiction Services

DBH / R.C. 5119.394 — State Registry

Ohio Revised Code 5119.394 requires recovery housing operators to register with OhioMHAS and maintain documentation standards. SoberBase helps operators satisfy the operational requirements that support registry eligibility.

R.C. 5119.394 Requirement SoberBase Feature Covered
Resident Intake Documentation Complete intake assessments, signed agreements, move-in records Intake Wizard + Assessment Module
Operator Registration Records Operator identity, house addresses, capacity documentation House Management + Operator Profile
Ongoing Compliance Documentation Continuous records demonstrating operational standards are maintained Compliance Score + Audit Log
Drug Testing Requirements Documented testing schedule and results per registry standards Drug Test Scheduler + Result Logs
Incident Reporting Obligations Written records of critical incidents, resident safety events Incident Report Module
Staff Qualifications Records of staff certifications and recovery coaching credentials Staff Certifications + Expiry Tracking

Alcohol, Drug Addiction and Mental Health Services Board

ADAMHS Board Compliance

County ADAMHS Boards fund and oversee local recovery housing networks. SoberBase gives boards the jurisdiction-wide oversight tools they need — and helps operators meet the referral and reporting requirements under R.C. 5119.396.

ADAMHS Requirement SoberBase Feature Covered
Multi-House County Oversight Aggregate reporting across all county-funded operators and houses County Dashboard + Org Overview
Jurisdiction-Wide Compliance Visibility Board-level view of compliance scores, incidents, and occupancy across all houses Enterprise Dashboard + Analytics
R.C. 5119.396 Referral Compliance Documentation that referrals originate from approved sources; county-certified operator verification Resident Intake Source Tracking
Bed Availability Reporting Real-time occupancy data for county placement coordination Occupancy Dashboard + Bed Tracking
Outcome Reporting Drug test pass rates, length-of-stay data, incident rates for funded operators Analytics Module + Export Reports
Court-Supervised Resident Tracking Progress reports for probation and drug court — R.C. §5119.396 compliance documentation Court Portal + Supervision Reports

Health Insurance Portability and Accountability Act

HIPAA-Grade Infrastructure

SoberBase is built on HIPAA-grade infrastructure with encryption, access controls, and audit logging. Important: "HIPAA certified" is not a real designation — there is no HIPAA certification body. What matters is whether your platform's technical and administrative safeguards align with HIPAA requirements. Ours do.

We say "HIPAA-grade infrastructure" — not "HIPAA certified" — because the latter doesn't exist as a formal designation

Technical Safeguards

All resident health information, drug test results, medication records, and personal data are protected by the following technical controls, aligned with the HIPAA Security Rule (45 CFR §164.312).

AES-256 Encryption at Rest TLS 1.3 in Transit Role-Based Access Controls (RBAC) Tamper-Evident Audit Logging Unique User Identification Automatic Session Expiry Database Encryption Daily Automated Backups Point-in-Time Recovery
HIPAA Security Rule Safeguard SoberBase Implementation Covered
Access Control (§164.312(a)(1)) Unique user identification, role-based access, automatic logoff JWT Auth + RBAC + Session Expiry
Audit Controls (§164.312(b)) Hardware/software activity records for PHI access and modification Timestamped Audit Log (all writes)
Integrity Controls (§164.312(c)(1)) PHI is not improperly altered or destroyed Immutable Records + Tamper-Evident Logs
Transmission Security (§164.312(e)(1)) PHI protection during electronic transmission TLS 1.3 (all endpoints)
Encryption at Rest (§164.312(a)(2)(iv)) Stored PHI is encrypted AES-256 Database Encryption (Neon)
Role Separation Staff access limited to assigned houses; no cross-org data leakage Staff House Assignments + RBAC
No Third-Party PHI Sharing Resident data is not sold or shared with advertisers or third parties Operators Own Their Data

Ready to Run a Compliant House?

SoberBase gives operators the documentation infrastructure to maintain ORH certification, satisfy state registry requirements, and demonstrate county-level accountability — starting at $26/house/month.