Security / HIPAA
Protect health
information.
Handling health data for US covered entities means HIPAA safeguards. We build the privacy and security controls and the paperwork.
What it requires
What HIPAA
asks of you.
Security Rule safeguards
Administrative, physical and technical safeguards for electronic health data.
Privacy Rule
Rules for how protected health information is used and disclosed.
Breach notification
Notify when protected health information is breached.
Business associate agreements
The right contracts with the entities you work for and with.
How we get you there
From gap
to ready.
Find your gaps
A risk analysis against the Security and Privacy Rules.
Design safeguards
The safeguards, policies and agreements HIPAA requires.
Put them to work
We deploy the controls and get the agreements signed.
Keep it current
Ongoing risk analysis and evidence, ready to show.
Packages
One package,
every stage.
Readiness, Implementation and Sustain, often run alongside SOC 2 for US customers.
See packagesQuestions
HIPAA, in your words.
We are a vendor to a US healthcare company. Does HIPAA apply?
If you handle protected health information on their behalf, you are a business associate and HIPAA applies. We build the safeguards and the agreement.
Is there a HIPAA certificate?
No official certification exists. We make you compliant and give you a risk analysis and evidence to show.
Privacy. Security. Intelligence.
Built for trust.
Tell us what you need to prove. We reply within one working day.