How we handle patient data.
What we build is built to HIPAA requirements. Below are the controls we can build into your software. We agree which ones your workflow needs before we write any code.
Controls we can build into your software.
Each one is a choice we make with you at scope and write into the plan.
- 01
Encryption at Rest and in Transit
We can encrypt your data where it is stored and while it moves between systems.
- 02
Per-Client Data Separation
We can design the database so each client's data is walled off from every other client's.
- 03
Single Sign-On and Multi-Factor Login
We can build sign-in through your single sign-on, with multi-factor login.
- 04
Audit Logs
We can build an audit log that records every change and who made it.
- 05
No Patient Data in Logs
We can design logging so patient data stays out of it.
- 06
Identifiers Removed Before Any AI Step
We can remove patient identifiers before any data reaches an AI step.
- 07
Business Associate Agreements
We can host your software with cloud vendors that sign a business associate agreement (BAA).
- 08
Least-Privilege Access
We can design access so each person and service sees only what their job needs.
What we don't claim. There is no official HIPAA certification for software. We say built to HIPAA requirements, and we show you the controls.
Ask us how your data would be handled.
Bring your security questions to the first conversation. We'll answer them for your workflow and your systems.
Talk to Us