Compliance & Security

Compliance

We ensure compliance of the Health Insurance Portability and Accountability Act of 1996 ( HIPAA ) at all levels and in all operations of the company. The offices and delivery centers of Medixperts are organizationally structured to comply and adhere to all HIPAA regulations and applicable guidelines.

Confidentiality of Information

We respect all patient information provided by our client and will not disclose any information.

Confidentiality of patient and practice information is assured. MediXperts has zero tolerance policy for any breech of confidentiality. Records are kept secure and all appropriate laws are observed for handling the release of information.

Security & Confidentiality

With our in-house developed Document management software, the confidentiality is maintained throughout the process. We undertake following actions to ensure data confidentiality at delivery centers -

• Controlled access to the workplace (authentication based entry).
• Controlled media usage / movement through inventory logs and physical checks.
• Digital certificate authentication for all servers.
• Each user has unique login, power-on and screensaver passwords.
• Controlled user accounts to access shared resources like fax machines and photocopiers.
• Business associates are only given permission to access required files and folders, thus maintaining the confidentiality of clients and patient data.
• No mobile phones, cameras, digital recorders, floppy / CD drive allowed to the workplace.
• Security verification of all Business associates.

Data security during transmission over the network –

The data transmitted over the internet is highly secured, as we take following measures to ensures confidentiality, integrity and non-repudiation of the data –

• 128-bit SSL based VPN used for transmission of patient data.
• Enterprise-wide multiple virus protection system.
• Restricted access to network.
• Data encryption for enhanced security.
• Firewall, DMZ, Proxy server and Intrusion detection system in place.
• Complete exclusion of LAN with the Internet.
• Random screening of emails for attachments.

HIPAA Compliance