Business Associate Agreements
We sign a BAA with every client before we access any protected health information. It sets out how we use, protect and report on that information.
Security & HIPAA
How we protect patient information
These are the practices and commitments we follow every day. We describe them in plain language so you know exactly what to expect.
Role-based access
Team members only get access to the systems and accounts their role needs. Access is reviewed and removed promptly when roles change.
Minimum-necessary access
We follow the minimum-necessary principle: we use only the patient information needed to do the billing task in front of us.
Workforce training
Our team completes HIPAA privacy and security training when they join and on a regular schedule after that.
Encrypted communication and file transfer
Patient information is shared through encrypted channels and secure file transfer, never through ordinary email or website forms.
Incident response procedures
We have documented steps for identifying, containing and reporting a security incident, including notifying clients as our BAA requires.
A copy of our Business Associate Agreement is available on request. Contact us to ask for one.
Please do not send patient health information through this website. Our contact and audit forms are only for practice and contact details. Once we work together, we set up secure channels for anything that includes patient information.
Find out where your revenue is leaking.
A free, no-obligation review of your claims and payor contracts, explained in plain language.