Your health data isprotected and secure
CareWired is committed to maintaining the highest standards of data security and HIPAA compliance to protect your protected health information (PHI).
Our Commitment to HIPAA Compliance
The Health Insurance Portability and Accountability Act (HIPAA) establishes national standards for protecting sensitive patient health information. As a healthcare technology platform, CareWired is committed to implementing comprehensive safeguards to ensure the security and privacy of health information.
This page outlines our approach to HIPAA compliance, security measures, and data protection practices. We continuously monitor and update our security controls to maintain the highest standards of data protection.
Certifications & Compliance
Industry-recognized security and compliance standards
HIPAA Compliant
Full compliance with HIPAA Privacy and Security Rules
SOC 2 Type II
Annual audits verify our security controls
Data Residency
All PHI stored in US-based, certified data centers
Business Associate Agreements
BAAs available for all covered entities
HIPAA Security Rule Safeguards
Comprehensive protection across administrative, physical, and technical domains
Administrative Safeguards
Security Management Process
Implemented policies and procedures to prevent, detect, contain, and correct security violations.
Workforce Training
All employees receive regular HIPAA training and security awareness education.
Access Management
Role-based access controls ensure personnel only access PHI necessary for their job functions.
Incident Response
Comprehensive incident response plan with procedures for identifying, reporting, and mitigating breaches.
Physical Safeguards
Facility Access Controls
Physical security measures at data centers including biometric access, surveillance, and visitor logs.
Workstation Security
Policies governing proper use and physical safeguards for workstations accessing PHI.
Device and Media Controls
Procedures for disposal, reuse, and tracking of hardware and electronic media containing PHI.
Technical Safeguards
Encryption
End-to-end encryption for PHI in transit (TLS 1.3) and at rest (AES-256).
Access Controls
Unique user identification, automatic logoff, and emergency access procedures.
Audit Controls
Comprehensive logging and monitoring of all PHI access and system activity.
Integrity Controls
Mechanisms to ensure PHI is not improperly altered or destroyed.
Privacy & Security Best Practices
Additional measures to protect your health information
Data Minimization
We collect only the minimum PHI necessary to facilitate healthcare appointments and services.
Regular Security Assessments
Annual risk assessments and penetration testing to identify and address vulnerabilities.
Breach Notification
Procedures in place to notify affected individuals, HHS, and media within required timeframes.
Vendor Management
All third-party vendors undergo security reviews and sign Business Associate Agreements.
Patient Rights
Procedures to honor patient rights to access, amend, and request restrictions on their PHI.
Disaster Recovery
Comprehensive backup and recovery procedures ensure PHI availability during emergencies.
Breach Response Protocol
Our systematic approach to handling security incidents
Detection & Assessment
Immediate identification and assessment of the breach scope and impact.
Containment
Swift action to contain the breach and prevent further unauthorized access.
Investigation
Thorough investigation to determine the cause and extent of the breach.
Notification
Timely notification to affected individuals, HHS, and other required parties.
Remediation
Implementation of corrective measures to prevent future breaches.
Documentation
Complete documentation of the incident and response for compliance records.
Business Associate Agreements (BAA)
As CareWired evolves, we are evaluating our role as a Business Associate under HIPAA for healthcare providers who are Covered Entities.
For providers who require a Business Associate Agreement, we are prepared to discuss arrangements that address:
- Permitted uses and disclosures of PHI
- Safeguards to protect PHI confidentiality, integrity, and availability
- Reporting obligations for security incidents
- Subcontractor requirements and oversight
- PHI handling and data retention policies
Please note: Our platform's current implementation and BAA availability may vary based on your specific use case. We recommend discussing your HIPAA requirements with our team.
Contact Us About BAAYour HIPAA Rights
You have specific rights regarding your protected health information
Right to Access
You can request to see and obtain copies of your PHI.
Right to Amend
You can request corrections to your PHI if you believe it is incorrect or incomplete.
Right to an Accounting
You can request a list of certain disclosures of your PHI.
Right to Request Restrictions
You can request limitations on how we use or disclose your PHI.
Right to Confidential Communications
You can request to receive communications about your PHI by alternative means or at alternative locations.
Right to Notification of Breach
You have the right to be notified if your PHI is breached.
To exercise any of these rights, please contact our Privacy Officer at info@carewired.com
HIPAA Compliance Inquiries
For questions about our HIPAA compliance program, to report a potential security incident, or to request a Business Associate Agreement, contact our Privacy Officer:
Privacy Officer
CareWired, Inc.
123 Healthcare Avenue, Suite 500
Boston, MA 02108
United States
Email: info@carewired.com
Phone: N/A