Ciox Health Reviews (2026): What Legal Teams Should Know Before Choosing a Medical Record Retrieval Partner
For plaintiff law firms handling personal injury, mass tort, and medical malpractice cases, medical record retrieval is the foundation of case development. Delays, incomplete records, and unpredictable fees can throw off case timelines and add to operating costs. Many legal teams have worked with Ciox Health, a long-established release-of-information company that now operates as part of Datavant. This review looks at Ciox Health's history, customer feedback, legal track record, and fee considerations so litigation teams can make an informed decision about whether it fits their needs or whether an AI-powered retrieval partner offers a better path forward.
Key Takeaways
Ciox Health (now Datavant) holds a 1/5 customer review average on BBB from 32 reviews, with 48 complaints logged over the past three years. Its separate BBB business rating is B-.
Ciox agreed to a $1.85 million settlement resolving Texas allegations that it charged fees above state limits. Ciox denied wrongdoing.
A May 2024 phishing incident was reported to HHS as affecting 320,702 individuals, and a $900,000 class settlement covering about 58,309 people received final approval in September 2026.
Datavant now markets a legal and insurance offering with AI-powered summaries, analysis, and chronologies, so the real comparison comes down to specific workflow differences.
Retrieval charges can vary by request type, state law, delivery method, and contract terms, while Codes Health uses flat-fee pricing.
Codes Health works toward complete records in a couple of weeks, with AI review before submission, Missing Record Review, and potential breaches of care flagged for attorney review.
Codes Health says same-day retrieval services often return incomplete record sets that need added client involvement, which can lead to client churn.
Understanding Ciox Health's Role in Medical Records Retrieval
Ciox Health launched in 2016 following the combination of HealthPort, IOD, Care Communications, and ECS. Its corporate lineage through HealthPort dates to 1976. Ciox merged with Datavant in 2021, and the business now operates under the Datavant name.
Historically, Ciox's work has centered on healthcare operations such as:
Medicare Advantage risk adjustment services
Health plan chart retrieval
On-site hospital ROI teams
Enterprise healthcare data operations
Today, Datavant also markets a dedicated legal and insurance offering for law firms, insurers, and TPAs. It covers record retrieval, record discovery, AI-powered summaries and chronologies, and medical expert review. So for plaintiff firms, the question isn't whether Datavant serves legal teams. It's which specific workflows matter most for your cases, and how each vendor handles authorization quality, record completeness, pricing, and fit with your case management system.
What Customer Reviews Reveal About Ciox Health
On BBB, where the company is listed as Datavant (formerly Ciox Health), it holds a 1/5 customer review average based on 32 reviews. That figure is the customer review average, not BBB's business rating, which is currently B-.
Common Themes in Customer Reviews
Payment and processing delays:
"Still waiting for payment for charts that were already uploaded over a month ago"
"Everytime I call, I get, 'I will send an email.' Again, nothing ever gets done"
Hard-to-reach customer support:
"Impossible to reach someone on the phone"
Multiple reviews mention difficulty connecting with representatives
Retrieval workflow frustrations:
"Medical records retrieval system is beyond ridiculous"
"Don't think I've ever actually been able to request records and receive them successfully in the 5 to 6 years I've been forced to call them"
Communication concerns:
Complaints about "insecure email communications and cumbersome retrieval workflows"
BBB shows 48 total complaints over the past three years, with 19 complaints closed in the last 12 months. The company is not BBB accredited.
For litigation teams working under strict deadlines, reviewer-reported experiences like these are worth weighing alongside a vendor's own published service claims.
Ciox Health's Legal and Compliance Track Record
Beyond customer reviews, Ciox Health has been involved in several legal and regulatory matters. Each one involved allegations, and the settlements below did not include an admission of the underlying wrongdoing.
$1.85 Million Texas Fee Settlement
Ciox Health agreed to a $1.85 million settlement resolving allegations that it charged certain Texas requesters fees exceeding applicable limits. Plaintiffs alleged that one requester was charged $77.50, where they contended the applicable amount was $25. Ciox denied wrongdoing.
May 2024 Data Incident
A phishing attack on May 8 to 9, 2024, led to unauthorized access to an email account. Ciox reported the incident to HHS as affecting 320,702 individuals. Information that may have been exposed includes names, dates of birth, Social Security numbers, and protected health information. The subsequent settlement class consists of approximately 58,309 people whose information may have been compromised. Ciox agreed to a $900,000 settlement, which received final approval in September 2026.
NOSSCR Complaint
On March 25, 2024, the National Organization of Social Security Claimants' Representatives filed a formal complaint with HHS's Office for Civil Rights. NOSSCR alleged that Ciox required prepayment, charged excessive fees, and delayed providing records. These remain NOSSCR's allegations, not a government finding against Ciox.
Understanding Retrieval Fees and Cost Predictability
Medical record charges can be hard to predict. A law firm blog post from Avard Law reproduces what appear to be Ciox contractual terms listing potential charges such as:
Copying fees
Handling fees
Certification fees
Electronic data storage fees
"No record found" fees
That list is not a current official Datavant rate card, and these charges don't necessarily apply to every patient, attorney, facility, or jurisdiction. What a firm actually pays can depend on the request type, applicable state law, delivery method, custodian or provider charges, and contractual terms.
Patient access requests work differently, too. HHS explains that a $6.50 flat fee is just one optional method for calculating charges on certain electronic patient requests, not a universal fee or cap.
Codes Health takes a simpler approach: flat-fee pricing with no per-page charges, so firms know their retrieval costs upfront. For practices handling high case volumes, predictable pricing makes case economics much easier to plan.
Turnaround Time: Why Speed and Completeness Both Matter
Turnaround depends on the provider, the request type, the quality of the authorization, and the retrieval channel, so timelines vary across vendors and individual requests. Before signing on with any vendor, Datavant, ask for documentation of current turnaround on legal requests similar to yours.
Slow or incomplete retrieval creates real bottlenecks for litigation teams:
Pre-litigation evaluation delays: Cases can't be properly valued without complete medical records
Statute of limitations pressure: Slow retrieval compresses the time available for case development
Expert witness scheduling: Medical experts can't begin review until records arrive
Demand preparation setbacks: Strong demands require complete documentation
Settlement negotiation disadvantages: Incomplete records weaken negotiating positions
Speed alone isn't the whole story, though. Codes Health notes that services advertising same-day retrieval often return only the records that are immediately available, leaving gaps that need additional client involvement to fill. In Codes Health's experience, that back-and-forth leads to client churn. Codes Health works toward complete records in a couple of weeks, not months, and checks deliveries against the original request before closing them out. That helps legal teams:
Evaluate case merit faster
Identify missing records earlier in the process
Begin expert review sooner
Prepare demands with complete documentation
Maintain stronger negotiating positions
What Sets Codes Health Apart for Plaintiff Law Firms
Datavant now advertises AI-powered summaries, analysis, and chronologies for legal teams. The meaningful differences come down to specific workflows. Here's what Codes Health brings to personal injury, mass tort, and medical malpractice practices.
Breach-of-Care Flags for Attorney Review
Codes Health's AI flags potential breaches of care, missed diagnoses, treatment delays, pre-existing conditions, and documented future medical expenses for attorney review. Every insight is verified by human medical and legal specialists. The public Datavant materials reviewed for this article don't describe the same breach-of-care identification workflow.
Case Chronologies Built for Litigation
Instead of a disorganized stack of records, Codes Health organizes documentation chronologically, grouping patient encounters and bills by visit. Summaries stay connected to source material, which cuts manual review time and helps make sure critical events aren't overlooked.
Missing Record Review
Codes Health's Missing Record Review compares delivered records against the original request and known treatment history. It helps identify missing date ranges, absent billing records, and specialist records referenced in notes but never retrieved, before those gaps surface during depositions.
Record Reuse for Mass Torts
Secure document storage keeps retrieved records accessible, which can reduce duplicate retrieval work when the same records are relevant across multiple stages of a matter or across related matters in a mass tort portfolio.
Purpose-Built AI, Not General Chatbots
General AI platforms like ChatGPT are not designed for litigation-grade medical record review. Codes Health's platform is purpose-built to analyze medical records with high precision, pairing AI extraction with human verification so attorneys can rely on what they're reviewing.
Integrations That Fit Your Workflow
Through the July 13, 2026 Filevine partnership, Filevine users can submit, track, and receive Codes Health requests directly inside their case files. For high-volume firms, Codes Health can also build custom integrations with CRM platforms and other medical software.
Codes Health's MIT-educated engineering team continuously builds out additional workflows and products, so the platform keeps evolving, improving, and becoming more comprehensive to meet the changing demands of modern legal practices.
Authorization Quality Review: Preventing Costly Delays
Incomplete authorizations are a leading preventable cause of denied record requests. Missing patient signatures, unclear expiration dates, or unchecked boxes for sensitive records can force you to resubmit and start over. Common errors that trigger rejections include:
Missing patient signatures
Unclear or expired authorization dates
Unchecked boxes for sensitive records (mental health, substance abuse, HIV)
Misspelled patient or provider names
Incorrect dates of service
Missing provider-specific requirements
A rejected or defective authorization can force a request to be resubmitted and significantly delay processing. Applicable deadlines depend on the request type and jurisdiction. For example, HIPAA's right of access generally gives covered entities 30 days to respond to an individual's request, with state variations, while attorney-authorized requests may follow different procedures.
Codes Health's AI review catches these errors before submission. The system automatically flags misspellings, missing dates of service, and signature issues that would otherwise cause provider rejections.
Datavant also documents authorization validation controls, although its public materials don't clearly describe the same requester-side, pre-submission error-checking workflow.
Comparing Ciox Health (Datavant) and Codes Health
When evaluating medical record retrieval options, plaintiff law firms should look at these specific differences:
Turnaround Time:
Datavant: Publishes its own turnaround targets for legal and insurance requests; actual timing varies by provider and request
Codes Health: Complete records in a couple of weeks, with completeness verified before delivery
AI Case Analysis:
Datavant: Advertises AI-powered summaries, analysis, and chronologies
Codes Health: Litigation-focused chronologies, potential breach-of-care flags for attorney review, and human-verified insights
Authorization Pre-Check:
Datavant: Documents authorization validation controls
Codes Health: AI-assisted, requester-side review before submission
Completeness Verification:
Datavant: Offers record discovery tools
Codes Health: Missing Record Review against the original request and treatment history
Pricing Model:
Datavant: Charges can vary by request type, state law, delivery method, and contract terms
Codes Health: Flat fee
Case Management Fit:
Datavant: Contact Datavant for current integration options
Codes Health: Native Filevine workflow, plus custom CRM and medical software integrations for high-volume firms
When Datavant May Fit
Ciox Health and Datavant may suit:
Enterprise healthcare organizations requiring on-site ROI teams
Health plans conducting Medicare Advantage risk adjustment
Teams already working within Datavant's network and tools
When Legal Teams Should Choose Codes Health
Plaintiff law firms should prioritize Codes Health when they need:
Complete records in a couple of weeks rather than months
Potential breaches of care flagged for attorney review
AI-generated case chronologies verified by humans
Missing record detection before trial
Transparent flat fee pricing
Pre-submission authorization review
Retrieval embedded in Filevine or custom-integrated with their existing systems
Making the Right Choice for Your Practice
Ciox Health has a long history in release of information and now operates within Datavant's broader legal and insurance offering. Before choosing, plaintiff firms should weigh what's on the public record:
BBB customer reviews average 1/5, with reviewers citing hard-to-reach support and processing delays
Two settlements totaling $2.75 million resolved litigation concerning medical record fee allegations and the May 2024 data incident
Retrieval charges that can vary by request type, jurisdiction, and contract terms
Workflow differences such as requester-side authorization review, missing record review, and flat fee pricing
Legal teams handling medical-record-intensive litigation deserve retrieval partners built around their workflows. Before committing to any vendor, request documentation of turnaround times, complete fee schedules, compliance certifications, and customer references from similar legal practices.
Bottom Line
Most retrieval delays trace back to preventable problems: authorizations with missing signatures or dates, record sets that look complete but aren't, fees that shift from request to request, and records that live outside your case file. Codes Health is built to catch those failure points early, with AI review before submission, Missing Record Review before delivery, flat fee pricing, and a native Filevine workflow. The result is complete, AI-organized records in a couple of weeks, not months, with potential breaches of care flagged for your review.
Schedule a demo to see how Codes Health handles medical records for your practice.
Frequently Asked Questions
What happened in the Ciox Health data incident?
A phishing attack on May 8 to 9, 2024, led to unauthorized access to an email account. Ciox reported the incident to HHS as affecting 320,702 individuals, and information that may have been exposed includes names, dates of birth, Social Security numbers, and protected health information. The settlement class consists of approximately 58,309 people, and the $900,000 settlement received final approval in September 2026.
Why does Ciox Health have low customer ratings?
On BBB, the company has a 1/5 customer review average from 32 reviews, and 48 complaints over the past three years. Reviewers commonly mention difficulty reaching customer support, payment processing delays, and cumbersome retrieval workflows. BBB's separate business rating for the company is B-.
What fees does Ciox Health charge beyond per-page costs?
There's no single public rate card that applies to every request. A law firm blog post reproduces what appear to be Ciox contractual fee terms, including copying, handling, certification, storage, and "no record found" fees. Actual charges depend on request type, state law, delivery method, custodian charges, and contract terms.
How long does Ciox Health take to retrieve medical records?
Turnaround varies by provider, request type, and authorization quality, so ask Datavant for current documentation on legal requests like yours. Codes Health works toward complete records in a couple of weeks and verifies completeness before delivery.
Does Ciox Health offer AI-powered case analysis?
Yes. Datavant now advertises AI-powered medical record summaries, analysis, and chronologies for legal and insurance teams. Its public materials reviewed for this article don't describe the same breach-of-care identification workflow or requester-side pre-submission authorization review that Codes Health offers.
