Privacy and security
Your patients' information, protected
We handle protected health information every day, so privacy is built into how we work.
Agreements
A business associate agreement with every client
Before we see any patient information, we sign a business associate agreement setting out how we protect it, as HIPAA requires.
Access
Only the people who need it
Access is limited by role, protected with multi-factor sign-in, and logged so there is a record of who viewed or changed what.
Our team
Trained and accountable
Everyone completes privacy training before working on client accounts and repeats it every year. Work outside the US happens only under the same controls and only where your contract allows it.
Vendors
Covered by agreements too
Software and service providers that handle patient information sign their own business associate agreements with us.
Incidents
A clear plan
If something goes wrong, we investigate immediately and notify you as required by law and by our agreement.