HIPAA Compliance
TheraNote Pro is built with comprehensive HIPAA compliance at its core, ensuring your practice meets all federal requirements for protecting patient health information.
Our HIPAA Commitment
TheraNote Pro is designed to help healthcare providers maintain HIPAA compliance while streamlining their practice management. We implement comprehensive safeguards to protect Protected Health Information (PHI) and ensure your practice meets all regulatory requirements.
Security Safeguards
🔒Technical Safeguards
- • 256-bit AES encryption at rest and in transit
- • Multi-factor authentication (MFA)
- • Role-based access controls
- • Automatic session timeouts
- • Comprehensive audit logging
🛡️Administrative Safeguards
- • Designated HIPAA Security Officer
- • Regular security risk assessments
- • Employee training programs
- • Incident response procedures
- • Business Associate Agreements
🏢Physical Safeguards
- • SOC 2 Type II certified data centers
- • 24/7 physical security monitoring
- • Biometric access controls
- • Environmental monitoring
- • Secure data destruction protocols
📋Compliance Features
- • Comprehensive audit trails
- • Data breach notification system
- • Patient rights management
- • Minimum necessary access
- • Regular compliance reporting
Business Associate Agreement
As a Business Associate under HIPAA, TheraNote Pro enters into a Business Associate Agreement (BAA) with each covered entity customer. This agreement outlines our responsibilities for protecting PHI and ensures compliance with HIPAA requirements.
Our BAA covers data handling, security measures, breach notification procedures, and termination protocols to ensure full compliance with HIPAA regulations.
Certifications & Compliance
SOC 2 Type II
Independently audited security controls
HIPAA Compliant
Full compliance with HIPAA Security Rule
ISO 27001
International security management standard
Questions About Our HIPAA Compliance?
Our compliance team is available to answer any questions about our HIPAA safeguards and security measures.
Contact Compliance Team