Legal

HIPAA Compliance

Our commitment to protecting your health information

What is HIPAA?

The Health Insurance Portability and Accountability Act (HIPAA) is a federal law that establishes national standards for protecting sensitive patient health information. HIPAA requires healthcare providers, health plans, and their business associates to implement safeguards to protect the privacy and security of health information.

Our HIPAA Commitments

🔐
Technical SafeguardsEncryption, access controls, audit logs, and automatic session timeouts protect your data at every level.
📋
Administrative SafeguardsWorkforce training, security policies, risk assessments, and incident response procedures are in place.
🏢
Physical SafeguardsSecure data centers with 24/7 monitoring, restricted access, and environmental controls.
📝
Business Associate AgreementsAll third-party vendors handling PHI sign BAAs and undergo security assessments.

Security Certifications

SOC 2 Type IICertified
HIPAACertified
HITRUSTCertified

Your Rights Under HIPAA

As a patient, HIPAA grants you the following rights:


Right to Access: You can request copies of your health records

Right to Amend: You can request corrections to your health information

Right to Accounting: You can request a list of disclosures of your PHI

Right to Restrict: You can request restrictions on certain uses of your PHI

Right to Confidential Communications: You can request alternative communication methods

Report a Concern

If you believe your privacy rights have been violated or have concerns about how your health information is being handled, please contact our Privacy Officer:

HIPAA Privacy Officer

Email: hipaa@tectonichealth.com


Phone: 1-800-TECTONIC (ext. 2)


You may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights.

Related documents