HIPAA Compliance
Your data security is our top priority
HIPAA Compliance at DOCTUS
The Administrative Simplification provisions of the Health Insurance Portability and Accountability Act of 1996 (HIPAA, Title II) required the Department of Health and Human Services (HHS) to establish national standards for electronic health care transactions and national identifiers for providers, health plans, and employers. It also addressed the security and privacy of health data. As the industry has implemented these standards, and increased the use of electronic data interchange, the nation's health care system will become increasingly effective and efficient.
Business Associate Agreements & Training
Comprehensive compliance framework ensuring all personnel are trained and audited
- HIPAA Compliant Business Associate agreements are entered into with all personnel.
- All personnel and business partners are trained in security policies and regulations.
- All personnel are audited at periodic intervals with regard to their understanding and application of training.
- Detailed backup plan documented and taught to all personnel, audited and tested periodically.
- All policies and procedures are well-documented and officially communicated, with regular monitoring and internal audits to ensure continuous compliance and improvement.
Physical Security
Multi-layered physical security measures protecting your data
Restricted Access
Access to production areas restricted to authorized personnel only.Identification Required
All personnel must carry identification at all times. Visitors are not permitted into production areas.Device Monitoring
No unauthorized storage devices allowed. All devices entering or leaving are monitored by qualified technical staff.No Network Storage
No protected information is allowed to be stored on the network after use.Physical Checks
Periodic and random physical checks are made of personnel leaving the facility.Paperless Production Facilities
Secure digital workflows with no physical document handlingContinuous CCTV Monitoring
24/7 surveillance of the facilityFire Alarm System
Comprehensive fire detection and prevention systemsPersonal Devices Prohibited
Strict device policies to prevent data breachesBiometric Access Control
Advanced biometric security for facility accessG4S Security at Entries and Exits
Professional security personnel at all entry points
Data Security & Network Protection
Advanced encryption and monitoring to protect your sensitive information
- Multilevel username/password protectionAccess to all protected information is restricted to authorized personnel with the use of multilevel username/password authentication systems.
- 128-bit SSL encryptionAll data transfers between facilities are encrypted using 128-bit SSL encryption to ensure maximum security during transmission.
- Default option for all clientsClients are offered VPN security as a default option, providing an additional layer of protection for secure remote access.
- 24/7 activity monitoringAll network activity is monitored and recorded continuously. All transfers are conducted by licensed or proprietary applications with full audit trails.
Questions About Our Security?
Contact us to learn more about our HIPAA compliance measures and data security practices