A system and method for providing secure access to electronic records. A processor receives, from a first client, a first request to access the electronic records, authenticates the first client, and provides access to the electronic records in response to determining that the first client is authenticated. The processor receives user input data from the first client and stores the user input data in association with the electronic records. The processor further receives from a second client a second request to access the electronic records, retrieves the user input data associated with the electronic records in response to the second request, and transmits a prompt to the second client in response to the retrieved user input data. The processor also receives an answer to the prompt and provides access to the electronic records in response to the answer.