Carepatron is Health Insurance Portability and Accountability Act (HIPAA)- compliant and designed to protect electronic Protected Health Information in accordance with the HIPAA Security and Privacy Rules.
What does HIPAA compliance mean?
HIPAA compliance means patient data is protected through defined security and privacy safeguards that ensure the confidentiality, integrity, and availability of electronic Protected Health Information (ePHI) while it is stored, accessed, and transmitted within the platform.
Users are responsible for configuring and using Carepatron in a way that meets their own compliance and regulatory obligations.
How does Carepatron protect electronic PHI?
Layered security controls protect ePHI.
Patient data is encrypted at rest and in transit using industry-standard encryption. Data stored in Carepatron is protected with AES-256 encryption, and data sent between users and the platform is protected with TLS 1.2 or higher.
Carepatron operates on a secure cloud infrastructure with continuous monitoring to help detect and respond to security risks.
How is access to patient data managed?
Access to e-PHI is limited to authorized users. Carepatron uses role-based access control and least-privilege permissions to ensure users can access only the data needed for their roles. Multi-factor authentication is available for all accounts to provide additional login protection.
How is Carepatron’s security reviewed and validated?
Carepatron’s security controls are independently reviewed through regular audits.
Carepatron maintains SOC 2 Type II compliance, which confirms that its security controls are designed effectively and operate consistently over time. These reviews provide external assurance that safeguards for protecting customer data are in place.
Is a Business Associate Agreement available?
Yes. Carepatron offers a Business Associate Agreement for customers who handle ePHI.
For formal documentation, audit reports, and verification of security and compliance practices, please visit the Trust Center. Carepatron’s Trust Center is the authoritative source for all official reports, certifications, and proof of adherence to security standards.
Our team will be available to answer any further questions you may have. Just reply via messenger through the Help channel in your workspace.