HIPAA
HIPAA compliant, with a BAA for every clinic.
We sign a Business Associate Agreement with every clinic we work with, and we hold BAAs with AWS, OpenAI and our other vendors.
Business Associate AgreementRiverside Family Medicine and Ace 78 Technologies LLC
L. BennettClinicAce HealthBusiness associate
The HIPAA safeguards
How Ace meets each safeguard.
TechnicalProtecting the data itself.
EncryptionTLS in transit, AES-256 at rest.
Access controlsRole-based permissions and two-factor sign-in.
Automatic sign-outIdle sessions end on their own.
Audit logsWho viewed or changed patient data, and when.
AdministrativePolicies and people.
HIPAA refresher sessionsOur team takes part in HIPAA refresher sessions.
Incident response planA written plan for handling any incident.
Business Associate AgreementsWith every clinic, and with our vendors.
PhysicalWhere the data lives.
AWS data centers in the USPatient data always stays in the US. Physical security is handled by AWS, under our BAA with them.
Backups and recoveryRegular backups and a plan to restore service.
Our vendors
Our vendors sign BAAs too.
Every service that touches patient data is covered by a Business Associate Agreement, including the AI behind Ace's calls and notes.
AWSHostingOpenAIAI modelsOur other vendorsEach with a BAA
Need our BAA?Email us and we'll send it over with everything you need for your compliance records.
contact@acehealth.site