Healthcare & EHR Software

On its website, SimplePractice claims its platform is HIPAA compliant and HITRUST certified. SimplePractice offers a Business Associate Agreement (BAA), and users automatically agree to it by signing up for a free trial.

The HIPAA (Health Insurance Portability and Accountability Act) Privacy Rule does not apply to consumer curation of health data or other protections related to privacy, security, or minimizing access to PHI. Even though 23andMe receives funding from the National Institutes for Health, 23andMe currently asserts that its data-mining analysis doesn’t constitute research on human subjects under the current version of the Common Rule because it de-identifies the data. This means that 23andMe may take the position that any consent it obtains to retain, use, and share consumer data isn’t necessary for regulatory compliance, but rather is done as a courtesy.

AxisCare offers multiple features, but the only one it labels as HIPAA-compliant is its two-way chat feature. Chat allows agencies to securely send messages back and forth to caregivers.

CareCloud claims its cloud-based healthcare software is HIPAA compliant, meeting all government security standards for data transmission and storage. References to HIPAA compliance are mentioned on several of the solutions pages — including telemedicine, robotic process automation, and the Health Systems customer page. However, there is no mention of Business Associate Agreements (BAA) on the website.CareCloud claims its cloud-based healthcare software is HIPAA compliant, meeting all government security standards for data transmission and storage. References to HIPAA compliance are mentioned on several of the solutions pages — including telemedicine, robotic process automation, and the Health Systems customer page. However, there is no mention of Business Associate Agreements (BAA) on the website.

On its pricing page, ClinicSense claims it is HIPAA compliant and displays a HIPAA compliant logo. There is no mention of Business Associate Agreements (BAA) on the ClinicSense website.

There is no mention of HIPAA compliance or Business Associate Agreements (BAA) on the EHR Your Way website.

According to the folio3 Digital Health website, Epic offers features that enable HIPAA compliance, including encryption, limited apps, audit trails, Transport Layer Security (TLS), and Secure Sockets Layer (SSL). 360Connect also details EPIC’s HIPAA compliance features.

According to its website, Healthie is HIPAA-compliant. Among the platform’s compliant features are storing personal health information (PHI), communicating with patients via video calls, chats and other means, and storing financial data. All pricing plans include HIPAA compliance.

The Hyland website doesn’t address HIPAA compliance as a whole, but on the Trust Center page, the HIPAA logo is listed under the Compliance section. Hyland will enter into a Business Associate Agreement (BAA) with healthcare customers as applicable, according to information on the Trust Center.

The NextGen Healthcare website doesn’t have a blanket statement about its capabilities when it comes to HIPAA compliance overall. However, the website does state that NextGen offers a HIPAA-compliant telehealth platform.

Data security is addressed on the Practice EHR website, but nothing specific to HIPAA. On the FAQ page, it states data is securely encrypted, stored and backed up in the cloud, but no further compliance facts are shared.  

According to the Salesforce website, HIPAA-compliant healthcare applications can be built in Salesforce Health Cloud with a Business Associate Agreement (BAA) in place. 

On the platform’s homepage, Updox claims to protect its users and their patients by staying up-to-date on all HIPAA regulations. Calling itself a “reputable platform,” the website goes on to state that Updox is HIPAA compliant with robust security measures including encryption and secure data transmission. Features physicians can use while complying with HIPAA regulations include video conferencing, voice calls, texting, direct secure messaging, and faxing services.

The WebPT website states that its platform is HIPAA-compliant. The website also has a comprehensive HIPAA guide, primarily providing basic HIPAA knowledge. There is one paragraph within the guide that talks about selecting a HIPAA-compliant Electronic Medical Record (EMR) and how WebPT provides unique user IDs and passwords for each team member to control access to Protected Health Information (PHI).