Security & HIPAA
Security and HIPAA Information
Protecting patient information is part of the job in medical billing. Here is how HIPAA applies to billing partners, what to ask any vendor, and how to share information with us safely.
How HIPAA applies
Billing companies are business associates
Under HIPAA, a billing company that creates, receives, maintains or transmits protected health information on behalf of a healthcare provider is a business associate. The provider and the billing company should sign a Business Associate Agreement (BAA) that sets out how that information is protected.
There is no official government “HIPAA certification.” Be cautious of any vendor that claims to be HIPAA certified. Ask instead how they meet the HIPAA Privacy, Security and Breach Notification Rules.
Based on U.S. Department of Health & Human Services guidance on business associates.
What to ask us about
- Business Associate Agreements
- Our security practices
- How system access is granted and removed
- How we exchange files and documents securely
Questions to ask
What to ask any billing partner about security
This website
About this website
- The contact form is for business inquiries only and is not designed to receive protected health information.
- Form submissions are emailed to our team and are not stored in the website’s database.
- The website does not load third-party advertising or analytics trackers as built.
- Please never send PHI through the website or by regular email. Ask us for a secure channel instead.
More on this: our privacy policy, how we work through access you control in your own EHR, and the security questions in our guide to choosing a billing company.
Let’s take a closer look at your revenue cycle
Tell us what’s getting stuck. Denials, old A/R, credentialing, reports nobody reads? We’ll look at how you work now and tell you straight what we’d change, and why.