waiCheckout. Booking and payment for any clinic, in one flow.Set up Checkout

For clinics, centres and hospitals across Japan

Clinic software for Japan, built to help you achieve an on-site inspection with nothing to correct.

In Japan a physician's clinic is notified to the 保健所 within 10 days of opening, a 医療法人's clinic needs a 開設許可 first, and the same authority may walk in to inspect the 診療録, the staff and the safety systems. wai runs booking, signed clinical notes, patient messaging in Japanese, English or any language, payments and an audit trail on one record, so what an inspector reads is kept as the work is done.

Updated . Every MHLW fact is checked against mhlw.go.jp and the other official pages cited below.

A clinician in a long white coat walking through a tall stone lobby in Tokyo, sunlight across the floor and towers beyond the glass

For

Physician-owned clinics, 医療法人 groups, day surgery and diagnostic centres, hospitals and health systems

Regulators

Ministry of Health, Labour and Welfare, with each prefecture, city health centre and Tokyo special ward, and the Personal Information Protection Commission

Framework

医療法 and 医療法施行規則, 医師法, 個人情報保護法, and MHLW's security guideline 第7.0版

Records

Kept in each clinic's own country, under its rules

What the 保健所 finds with wai

A Tokyo or Osaka clinic on wai answers every enquiry in the language the patient wrote in, closes each consultation with a 診療録 entry the doctor has signed, and can show who read or changed any record, and when, the moment the 保健所 asks. The 開設届, the staff list and the safety file draw on the same records.

What does Japanese law ask of a clinic in 2026?

Five areas the 医療法, the 医師法 and the APPI regulate, from opening to the patient's data.

Five areas Japanese law regulates for a clinic, from opening to the patient's data. Open one for the rules behind it.1

01Opening a clinic, 開設届 or 開設許可A clinic opened by a physician who has completed clinical training is notified within 10 days of opening. Anyone else, a 医療法人 included, needs permission before opening.5 requirements
  1. 医療法 第8条, 開設届 within 10 days of opening, for a clinic opened by a 臨床研修等修了医師
  2. 医療法 第7条, 開設許可 before opening, for a clinic opened by anyone else, a 医療法人 included
  3. 医療法施行規則 第4条, what the 開設届 states, the clinical training certificate shown
  4. 医療法 第9条, 廃止届 within 10 days of closing
  5. 医療法 第30条の18の6, notice 6 months before opening in a designated 外来医師過多区域

Opening a clinic, 開設届 or 開設許可 on laws.e-gov.go.jp

02The 管理者 and the peopleEvery clinic is managed by a physician who has completed clinical training, who supervises the staff and posts who practises when.5 requirements
  1. 医療法 第10条, a 臨床研修等修了医師 as 管理者
  2. 医療法 第12条, the 管理者 manages one clinic only, unless the governor permits
  3. 医療法 第15条, the 管理者 supervises every doctor and member of staff
  4. 医療法 第14条の2, 院内掲示 of the 管理者, the doctors and their hours
  5. 医師法 第17条, only a doctor practises medicine

The 管理者 and the people on laws.e-gov.go.jp

03Medical safety and cybersecurityThe 管理者 must keep a written safety guideline, train staff, run incident reporting and infection control, and take the cybersecurity measures MHLW sets.5 requirements
  1. 医療法 第6条の12 and 施行規則 第1条の11, 医療に係る安全管理のための指針, staff training and incident reporting
  2. 施行規則 第1条の11 第2項, 院内感染対策, a 医薬品安全管理責任者 and medical device safety
  3. 医療法 第6条の10, 医療事故 reported to the 医療事故調査・支援センター without delay
  4. 施行規則 第14条 第2項, サイバーセキュリティを確保するために必要な措置
  5. 令和8年度版 サイバーセキュリティ対策チェックリスト, read at the 立入検査

Medical safety and cybersecurity on laws.e-gov.go.jp

04The 診療録A doctor writes the 診療録 without delay after every consultation, and the clinic's 管理者 keeps it 5 years. An electronic record must stay authentic, readable and preserved.5 rules
  1. 医師法 第24条 第1項, the 診療録 written 遅滞なく after each consultation
  2. 医師法 第24条 第2項, the 診療録 kept 5 years by the clinic's 管理者
  3. 医療情報システムの安全管理に関するガイドライン 第7.0版, 真正性, 見読性 and 保存性 of electronic records
  4. 医療法 第25条 第1項, the 診療録 and 帳簿書類 open to the 立入検査
  5. 医師法 第20条, no treatment or prescription without examining the patient

The 診療録 on laws.e-gov.go.jp

05Patient data under the APPIA patient's medical history is 要配慮個人情報. The clinic posts its purposes of use, protects the data, reports serious leaks to the PPC and discloses the record on request.6 rules
  1. 個人情報保護法 第20条 第2項, consent before acquiring 要配慮個人情報
  2. 個人情報保護法 第23条 to 第25条, 安全管理措置 and the supervision of staff and contractors
  3. 個人情報保護法 第26条, 漏えい等 reported to the 個人情報保護委員会 and the patient told
  4. 個人情報保護法 第27条 and 第28条, consent before provision to a third party, or to one abroad
  5. 個人情報保護法 第33条, the patient's right to disclosure
  6. 医療・介護関係事業者における個人情報の適切な取扱いのためのガイダンス, 利用目的 posted in the clinic

Patient data under the APPI on ppc.go.jp

What does a 立入検査 look at?

Six areas the 医療法 and MHLW's 立入検査要綱 name.2

  1. 01

    Staff

    The 管理者 and every doctor and nurse against what was notified, with licences on file.

  2. 02

    Premises and hygiene

    The rooms against the plans filed, cleanliness, and X-ray equipment where it is installed.

  3. 03

    The 診療録 and books

    The 診療録, 帳簿書類 and other records the clinic keeps, which article 25 lets the inspector see.

  4. 04

    Medical safety

    The written safety guideline, staff training, incident reporting, infection control, medicines and devices.

  5. 05

    Cybersecurity

    The FY2026 checklist filled in, and the incident contact chart shown on request.

  6. 06

    Who runs the clinic

    That the 開設者 really runs it on a non-profit basis, checked closely at self-pay clinics.

How does a 立入検査 end?

There is no public grade. The inspector checks each item as met or not met, and the authority tells the clinic what to correct.3

  1. Nothing to correctEvery item checked is met
  2. Items to correctThe clinic is told, and may be asked for an improvement plan
  3. OrdersReports or documents ordered, and changes required
  4. Closure or finesPermission revoked, closure ordered, or a fine
  1. 10 days

    is how long a physician has after opening a clinic to file the 開設届 under article 8 of the 医療法.1

  2. 5 years

    is how long the clinic's 管理者 must keep each 診療録 under article 24 of the 医師法.4

  3. 91.1%

    of hospitals inspected in FY2023 met the cybersecurity item, the lowest rate of any item checked.3

  • Where an item is not met, the authority notifies the 開設者 or 管理者 and gives the guidance needed to correct it, which may include an improvement plan.
  • Refusing or obstructing a 立入検査, or failing to file the 開設届, carries a fine of up to ¥200,000 under article 89 of the 医療法.
  • Opening without a required 開設許可 carries up to 6 months' imprisonment or a fine of up to ¥300,000 under article 87.
  • The governor may revoke a permission or order a clinic closed for a set period, for example where the 開設者 commits a crime or a medical irregularity.

What has changed for clinics in Japan?

Four things a clinic should know in October 2026, each marked as in force or not yet in effect.

  1. In force. MHLW revised its security guideline for medical information systems to 第7.0版 in June 2026.
  2. In force. The FY2026 cybersecurity checklist asks clinics to answer yes to every item during the year, and the 保健所 checks it at the 立入検査.5
  3. In force, area by area. Since 1 April 2026 a clinic without beds opening in a designated 外来医師過多区域 gives 6 months' notice, and Tokyo had designated no area as of April 2026.
  4. Not yet in effect. The amended APPI was promulgated on 17 July 2026 and takes effect on a date set by cabinet order within two years.

Who does what

MHLW writes the law, the local authority applies it, and the PPC supervises patient data.1

BodyWhat it does for a clinic
Ministry of Health, Labour and WelfareAdministers the 医療法 and the 医師法, publishes the security guideline, and issues the 立入検査 notice each year
Prefecture, health centre city or Tokyo special wardTakes the 開設届, grants the 開設許可, and runs the 立入検査 through its 保健所
Personal Information Protection CommissionSupervises the APPI, receives leak reports, and issues the guidance for medical and care providers with MHLW
医療事故調査・支援センターReceives the report of an unexpected death linked to care, under article 6-10

The Japanese names

The official names behind this page, in the words clinics search for.

  1. 医療法, the Medical Care Act, which governs opening and running a clinic.6
  2. 医師法, the Medical Practitioners' Act, which sets the 診療録 rule.
  3. 開設届, the notification filed within 10 days of opening.
  4. 開設許可, the permission needed before opening when the 開設者 is not a physician.
  5. 立入検査, the on-site inspection under article 25.
  6. 保健所, the public health centre that inspects most clinics.
  7. 管理者, the physician who manages the clinic.
  8. 要配慮個人情報, the sensitive personal information a medical history is.

What should clinic software in Japan run?

Each module runs part of the clinic and records the evidence for the requirements listed beside it.

  1. 01

    Appointments and booking

    Online booking from your own website, every clinician's diary read from their calendar, reminders, rebooking after a missed visit and waitlist offers when a slot opens.

    Evidences Opening a clinic, 開設届 or 開設許可Patient data under the APPI

    For patients
    Online booking at any hour, with a reminder before the visit.
    For the business
    Fewer missed appointments, and cancelled slots offered to the waitlist.
    On the record
    Every booking, reminder and change, with a time and a name.
  2. 02

    Billing and payments

    Card payments into your own Stripe account, the cancellation policy shown at booking, invoices, statements and reconciliation, with an export for your accountant.

    Evidences Patient data under the APPI

    For patients
    A clear price and policy before they commit, and an invoice in their app.
    For the business
    Payments reconciled against visits, with an export for your accountant.
    On the record
    What was charged, when, against which visit, and the policy the patient saw.
  3. 03

    AI scribe and clinical notes

    The note, letters and referrals written from the consultation, cited to published clinical guidelines, with the transcript beside the note, for the clinician to read, edit and sign.

    Evidences The 診療録Medical safety and cybersecurity

    For patients
    The clinician's attention stays on them during the consultation.
    For the business
    Less time spent writing notes after clinic.
    On the record
    A contemporaneous note, signed, with the time, the signature and the source it cites.
  4. 04

    Follow-ups and patient messaging

    WhatsApp, email and calls in one thread per patient, replies drafted in the patient's own language for your team to approve, a response clock on every new enquiry, and recalls a clinician approves.

    Evidences Patient data under the APPI

    For patients
    A reply in the language they wrote in, approved by your team.
    For the business
    More enquiries answered within the hour, when they are most likely to book.
    On the record
    The whole conversation on one record, with response times.
  5. 05

    Referrals, consent and audit trails

    Recording consent taken at booking, referrals written from the visit, patient flags for controlled drugs and safeguarding notes, and every read of a record logged against a named account.

    Evidences The 診療録Medical safety and cybersecurity

    For patients
    Flags and checks in the record at the point of care.
    For the business
    Incident reviews that start from the audit trail, with times and names.
    On the record
    Who saw what, who changed what, and when, to the minute.
  6. 06

    Staff access and accountability

    Named accounts for every person, and role-based access enforced in the database, so every action sits under a name.

    Evidences The 管理者 and the peopleMedical safety and cybersecurity

    For patients
    Their record seen only by staff whose role allows it.
    For the business
    Access and actions tied to named people, in the same system as the record.
    On the record
    Who holds which role, and every action taken under it.
  7. 07

    Reporting

    Takings, front desk and website reports, response targets, and the patient's own record exportable on request.

    Evidences Medical safety and cybersecurityOpening a clinic, 開設届 or 開設許可

    For patients
    A copy of their record when they ask for it.
    For the business
    Weekly reports for leaders on response times, the front desk and takings.
    On the record
    Reports for any period, produced on the day they are asked for.

Prices for clinics, groups and hospitals are published on the wai pricing page, and you can request a demo of the full platform.

Two people seated in armchairs before a wall of tall windows high above Osaka, the city spread out to the hills

How does wai evidence each requirement?

For each requirement, the records wai keeps, how you produce them, and what changes for patients and the business.

Opening a clinic, 開設届 or 開設許可

Systems running before the 保健所 visits.

  • Named accounts for every doctor and member of staff, with role-based access
  • Online booking, reminders and waitlist offers from the first day
  • Signed, timed notes on one record per patient
  • Records hosted in the clinic's own country, set up with you before go-live

On request. Show the staff named in the 開設届 working under their own accounts, on real patients.

For patients
A clinic that works properly from the first appointment.
For the business
An opening on the planned date, with the on-site check matching the filing.

The 管理者 and the people

Every action under a named, accountable person.

  • A named account for every doctor and member of staff
  • Role-based access enforced in the database
  • The signing doctor recorded on every note and letter
  • Every read and change of a record logged against the account

On request. Show who holds which role, and every action taken under it, to the minute.

For patients
Their record seen only by the people whose role allows it.
For the business
A staff list and access log that match the 開設届, ready for the 保健所.

Medical safety and cybersecurity

Incident reviews that start from the record.

  • An audit trail of who saw and changed what, and when
  • Named accounts and role-based access for every person
  • Signed, contemporaneous notes for every visit
  • Patient flags for controlled drugs and safeguarding notes

On request. Pull the timeline behind an incident, with times and names, from the audit trail.

For patients
Problems found and fixed, with the reason recorded.
For the business
A safety file and a cybersecurity checklist backed by live data.

The 診療録

A 診療録 where every entry has an author and a time.

  • Notes drafted from the consultation, read, edited and signed by the doctor
  • The transcript beside the note, so the source of each entry stays visible
  • Every read and change logged against a named account
  • The patient's own record exportable on request

On request. Open any consultation to see the note, its author, its signature and its time together.

For patients
A copy of their record when they ask for it.
For the business
Less time writing notes after clinic, and a 診療録 written without delay.

Patient data under the APPI

Every patient conversation on one record, in their language.

  • WhatsApp, email and calls on one thread per patient, with response times
  • Replies drafted in the patient's language for your team to approve
  • Recording consent taken at booking, and the consent discussion in the note
  • Every read of a record logged against a named account

On request. Show who opened a patient's record, when, and every message sent to them.

For patients
Clear answers in Japanese, English or the language they wrote in.
For the business
A leak investigated from the access log in hours, inside the PPC's 30 days.

What do patients and the business gain?

Published research on response times, ambient scribes and appointment reminders.

  1. 7x

    An enquiry answered within the hour is nearly seven times as likely to become a real conversation.7

  2. 30%

    Clinicians using an ambient scribe did 30% less work after hours.8

  3. 23%

    Patients sent a notification before their visit were 23% more likely to attend.9

How does wai surface inspection evidence on request?

What may be asked for, where it is kept in wai, and how it is produced.

  1. The 診療録The patient record, beside the transcriptOpen the consultation to see the note, its author, signature and time together.
  2. Changes to an entryThe audit trailWho changed the note, when, and the signed version that stands.
  3. Access to recordsEvery recordWho read it, under which account, to the minute.
  4. Staff and rolesAccounts and rolesWho holds which role, matched to the staff named in the 開設届.
  5. Accounts of leaversAccounts and rolesWhich accounts were closed, and when, for the cybersecurity checklist.
  6. ConsentThe booking and the noteThe recording notice the patient saw at booking, and the consent discussion in the note.
  7. Patient communicationThe patient's threadEvery message, in Japanese, English or any language, with response times.
  8. Fees and policiesPaymentsWhat was charged, against which visit, and the policy the patient saw.

How do you prepare a Japanese clinic for a 立入検査?

A readiness checklist in four parts, for any prefecture.

01Opening and notifications

  • Confirm whether the clinic files a 開設届 or needs a 開設許可 first.
  • Consult the 保健所 with floor plans before building work starts.
  • File the 開設届 within 10 days of opening, and a 廃止届 within 10 days of closing.
  • Check whether the site sits in a designated 外来医師過多区域.

02People

  • A 管理者 who has completed clinical training, managing this clinic only.
  • Every doctor's and nurse's licence on file, matching the notification.
  • The 管理者, the doctors and their hours posted inside the clinic.
  • Accounts of leavers closed on the day they leave.

03The 診療録

  • Every consultation written up without delay, by the doctor who saw the patient.
  • Each 診療録 kept 5 years, with electronic entries authentic, readable and preserved.
  • Patients can ask for disclosure, with a reasonable fee if any.
  • The 利用目的 posted in the clinic and on its website.

04Safety and security

  • A written safety guideline, staff training and an incident reporting route.
  • Infection control, a medicines safety lead and medical device checks.
  • The FY2026 cybersecurity checklist answered, with target dates for every no.
  • An incident contact chart naming the vendor, MHLW and the police.

What will the 保健所 ask you?

Questions that come from what article 25 lets the inspector see, what to show, and where wai holds the answer.

01Who is the 管理者, and do they manage only this clinic?

What to show

The 管理者's licence and clinical training certificate, matching the 開設届.

Where wai has it ready

Named accounts and roles show who holds the 管理者 role, and every action taken under it.

02Show me the 診療録 for these patients.

What to show

A record written without delay, with every entry's author and time, kept for 5 years.

Where wai has it ready

Notes are signed and timed by the doctor, and every change is logged against a named account.

03Which doctors and nurses work here?

What to show

The staff list, the licences and the posted hours.

Where wai has it ready

Every person has a named account, so the staff list and the access log match.

04How are incidents reported and acted on?

What to show

The safety guideline, the incident reports and the improvement taken.

Where wai has it ready

The audit trail gives each review its timeline, with times and names.

05Where is the cybersecurity checklist, and who do you call in an incident?

What to show

The FY2026 checklist filled in, and the incident contact chart.

Where wai has it ready

Role-based access, named accounts and a full access log answer the checklist's access items.

06Where are your patients' records stored?

What to show

Where the servers sit, which law applies, and the notice patients see.

Where wai has it ready

Records are hosted in the clinic's own country, set up with you before go-live.

07How do you use AI in care?

What to show

Where AI is used, and who decides.

Where wai has it ready

AI drafts the note and the reply. The doctor signs the note, and a person approves every message.

What is at stake in a 立入検査?

A finding is a matter of record with the authority that licenses the clinic, and the market a clinic competes in counts more than 100,000 clinics.

  1. 105,702

    general clinics operated in Japan at the end of July 2026, 15,595 of them in Tokyo and 9,128 in Osaka.10

  2. 93.2%

    of Japan's 8,138 hospitals were inspected under article 25 in FY2023, 7,587 of them.3

  3. ¥100 million

    is the highest fine on a company for breaching an order of the Personal Information Protection Commission.11

Questions

What is the best clinic software for a clinic in Japan?

The best software for a Japanese clinic is the system the clinic already runs on, so the evidence is kept as the work is done. Look for a 診療録 that shows the author and time of every entry, notes signed by the doctor, messaging in Japanese and English, named accounts with role-based access and a full audit trail. wai is built that way, to help you achieve an on-site inspection with nothing to correct.

Is there MHLW approved clinic software?

MHLW administers the law, and the prefecture or public health centre registers and inspects clinics. It does not approve, certify or endorse software, wai included, and software cannot earn an inspection result on a provider's behalf. wai keeps the records your team uses to show the 保健所 how care is delivered, and the 保健所 decides the inspection result.

Does a doctor need permission to open a clinic in Japan?

No. A doctor who has completed clinical training opens the clinic and files a 開設届 within 10 days. A 医療法人 or anyone else needs a 開設許可 before opening.

How often does the 保健所 inspect a clinic?

MHLW's 要綱 sets an inspection of every hospital in principle once a year, and asks authorities to inspect clinics as the need arises. MHLW also asks them to check each newly notified clinic on site against its 開設届, promptly.

How long must a Japanese clinic keep the 診療録?

5 years under article 24 of the 医師法, kept by the clinic's 管理者. Other records the clinic keeps carry their own periods.

Can AI write the 診療録 in a Japanese clinic?

The 医師法 requires the doctor to write the 診療録 without delay, and only a doctor may practise medicine. A note drafted by AI fits that when the doctor reviews it, edits it and signs it under their own name, and every change stays in the audit trail.

Where does wai keep our records?

In each clinic's own country, under that country's rules, encrypted, with a full audit log. We set this up with you before go-live.

See wai on your own diary, notes and inbox.

Fifteen minutes on video, in Japanese or English, on your own clinic's records. Built to help you achieve an on-site inspection with nothing to correct. wai hosts each clinic's records in its own country, under that country's rules. We set this up with you before go-live.

team@wellnessa-i.com