Enveloc Helps with HIPAA Backup Compliance

The Health Insurance Portability and Accountability Act of 1996 (HIPAA) impacts virtually every health-related organization in the U.S., including all health care providers (even one-physician offices), health plans, employers, public health authorities, hospitals, life insurers, clearinghouses, billing agencies, information systems vendors, service organizations, and universities. Part of this act is focused on the secure transmission and storage of confidential patient data. Non-compliance with these regulations can mean both civil and criminal penalties. To be HIPAA compliant, organizations must provide reasonable and appropriate administrative, technical, and physical safeguards to ensure integrity, confidentiality, and availability of patient information.

Under HIPAA, organizations must provide security and privacy for personal health information to guard against reasonably anticipated threats or hazards, both in transit and during storage. Physical safeguards and technical measures to protect patient information must also be in place as well. Rather than spending huge sums of money to bring their own IT departments within HIPAA compliance, users can utilize Enveloc to provide an economically feasible data security and storage solution without compromising patient privacy.

With Enveloc, patient data is secured using 256-bit AES encryption before it is transmitted to our servers residing at our secure class A Network Operation Centers. Physical access is strictly controlled through administrative procedures, physical safeguards, and technical security measures to prevent unauthorized use or disclosure of customer data. Access to data requires that designated personnel provide an authorized encryption passphrase (not even Enveloc has a copy), making unauthorized access virtually impossible.

HIPAA also mandates that healthcare providers retain electronic patient records for a minimum of 6 years and strictly forbids unauthorized access to individually identifiable health records. To accommodate, Enveloc provides a cost effective way to store patient data indefinitely in secured facilities, in encrypted lossless compression.

Enveloc features daily automatic backups scheduled by the user and backups can be restored to any location, 24/7. Our ‘Always Live’, US-based customer service is available around the clock and daily backup audits and confirmation e-mails with summary transfer logs ensure the integrity of every single data backup set to provide a clear audit trail, if necessary.