Back to Compliance

HIPAA Compliance

Health Insurance Portability and Accountability Act

The Health Insurance Portability and Accountability Act (HIPAA) sets the standard for protecting sensitive patient data in the United States. At VitaScribe, we have implemented rigorous administrative, physical, and technical safeguards to ensure full compliance and the protection of Protected Health Information (PHI).

Our HIPAA Framework

Technical Safeguards

We use advanced technology to protect PHI and control access to sensitive information:

  • AES-256 encryption at rest and TLS 1.3 in transit
  • Unique user identification and automatic log-offs
  • Emergency access procedures

Administrative Safeguards

Our internal policies and procedures are designed to manage security conduct and workforce actions:

  • Regular security risk assessments
  • Workforce security training and management
  • Sanction policies for security violations

Physical Safeguards

We protect our physical systems and the equipment therein from unauthorized physical access:

  • Facility access controls and validation
  • Workstation security and device controls
  • Inventory of hardware and electronic media

Business Associate Agreements (BAA)

For our US-based covered entity customers, VitaScribe enters into Business Associate Agreements to satisfy the HIPAA regulatory requirements and to provide assurance that we will appropriately safeguard PHI.

Official Resources

For more information about HIPAA regulations, please refer to:

Have questions about our HIPAA compliance?