We sign a BAA
Before we access any protected health information, we sign a Business Associate Agreement with your practice.
HIPAA & Security
Plain-English answers for practice owners and managers. No jargon, and no claims we can't back up.
Our commitments
Access controls
Role-based access, so staff see only what their job requires, with a unique login for every user.
Encryption
Patient data is encrypted in transit and at rest.
Audit logs
Access to PHI is logged, so you can see who viewed or changed what, and when.
HIPAA-eligible hosting
We deploy on cloud services that sign a BAA, such as Microsoft Azure.
Minimum necessary
We collect and move only the data a workflow actually needs.
Straight talk
Anyone who sells you a 'HIPAA certified' product is overstating it. What matters is how software is built and run, and who signs a BAA. We build for HIPAA compliance, we sign a BAA, and we document how our software handles PHI so it supports your own compliance work.
Shared responsibility
We handle
- Secure design and build of the software
- A signed BAA before any PHI is involved
- Hosting configuration, encryption and backups
- Audit logging and access controls
- Security updates under a support plan
Your practice handles
- Deciding which staff get which access
- Training staff on your privacy policies
- Your own HIPAA risk assessment
- Telling us when staff join or leave
- Your Notice of Privacy Practices
FAQ
Are you HIPAA certified?
There is no official government HIPAA certification. We build for HIPAA compliance, sign a BAA and support your compliance program.
Can you work inside our existing cloud account?
Yes. If you already have a HIPAA-eligible cloud account with a BAA in place, we can deploy there.
What happens if there is a security incident?
We tell you promptly, help you investigate using the audit logs and support your breach-notification obligations under your BAA.
Security overview
Want the details in writing?
Ask for our security overview and we'll walk your team through how we handle PHI, on a call in your time zone.
- 30 minutes, scheduled in Eastern or Central time
- A list of what to automate first
- No obligation to hire us
Medical billing · Florida4000 Hollywood BlvdHollywood, FL 33021Get directions to our Florida office (opens in a new tab) →Medical billing · Texas5718 Westheimer Rd Ste 1000Houston, TX 77057Get directions to our Texas office (opens in a new tab) →