HIPAA Compliance Statement
Your Privacy Is Our Priority

We take the protection of your health information seriously. We follow the Health Insurance Portability and Accountability Act (HIPAA), the federal law that sets the standard for keeping your personal health information private and secure.

How we follow HIPAA

• Privacy Rule: We use and share your health information only as the law allows. You have the right to review your records, get a copy, and ask for corrections. You can read how we handle your information in our Notice of Privacy Practices.

• Security Rule: We protect your electronic health information with safeguards in three areas:

  • Administrative: clear policies, regular risk reviews, and designated staff who oversee security.
  • Physical: controlled access to our facilities, secured workstations, and careful handling of devices and media.
  • Technical: unique user logins, access controls, activity tracking, and encryption to protect data in storage and in transit.

• Breach Notification Rule: If a breach of your health information ever occurs, we will notify you, the U.S. Department of Health and Human Services, and, when required, the media.

• Omnibus Rule: Any vendor or partner that handles your health information on our behalf must sign a Business Associate Agreement and meet the same standards we do.

Our team is trained

Every member of our staff completes HIPAA privacy and security training on a regular basis, and we document that training. Team members can access only the information they need to do their jobs.

Trusted, HIPAA-compliant technology

We host and protect your information using Amazon Web Services (AWS), a trusted provider whose services are HIPAA compliant. We have a Business Associate Agreement in place with AWS, and our systems are built with strong security controls and encryption.

Ongoing commitment

We regularly assess our systems for risks, keep written records of our policies, training, and security reviews, and have designated Privacy and Security Officers who make sure we stay compliant.

Questions or concerns?

If you have questions about how we protect your information, or you'd like to exercise your privacy rights, please contact our Privacy Officer at support@ideatesol.com.