Well. All our processes are HIPAA compliant but we do not have a certification yet.We are working on it :)
As of now we are a second opinion platform globally with users across 160 countries.
We're fully HIPAA-compliant, as Tyler mentioned in another comment. Data is encrypted, and isn't stored on the device. HIPAA (and specifically MU Stage 2) is actually more helpful for what we are doing than anything else; letting patients get access to their records electronically is a hugely important step towards solving major problems in the health industry.
We aren't yet HIPAA compliant (yet), we recently got SOC2 compliance working with a compliance vendor to do more certifications. One thing is that with our on-prem agent your customer data never leaves your VPC.
Is that HIPAA-compliant? (Not sarcasm: I don’t know HIPAA rules enough to assess myself in the cloud-vendor / medical-institution scenarios we’re seeing here.)
reply