HIPAA, security & encryption | Aculab

Aculab
trusted by...

Aculab conform to HIPAA and HITECH regulations, which allows us to enter into HIPAA Business Associate Agreements (BAA) with our Covered Entity customers who provide healthcare platforms.

HIPAA privacy whitepaper

HIPAA & HITECH compliance

Suggestions for ensuring compliance include:

Security compliance

Authentication

Password authentication to access data such as recordings doesn’t alter the fact that such data is e-PHI and, if it is created, received, processed, stored or transmitted via Aculab Cloud, it is subject to the Privacy and Security Rules.

Encryption

Data over encrypted channels remains e-PHI and is subject to the Rules. Encrypting the data is an effective means of complying with the Rules and meeting your obligation.

Messaging

You can’t send a short message over an encrypted channel; it remains plain text on transmission. Furthermore, an SMS sent to the patient includes the destination number, which could be used to identify the individual, thus qualifying the text as e-PHI. So, you need to ensure that the content of text messages contains no sensitive patient data.

Recordings

Voice recordings can be made by healthcare professionals and patients alike, and are subject to compliance. An effective method of protecting and securing recordings is to use Aculab Cloud to encrypt the file.

Security compliance

Security compliance

Message Playback

The process is similar, albeit in reverse, for playback of a .wav file, for example, to relay information in the form of a message to a patient. On receipt of the encrypted file for transmission, you should ensure the applicable key is available only at the time of decryption in order to play the message back.

Fax Handling

The process is similar when sending fax messages, on receipt of the encrypted fax for transmission, you should ensure the applicable key is available only at the time of decryption in order to transmit the fax. Again, the key should be received via a different route and destroyed after use, as with the original encrypted message.

Security

Physical security

Our Amazon AWS datacentres use multiple layers of operational and physical security to ensure the integrity and safety of your data, including restricted authorisation and constant surveillance.

Network security

Aculab is committed to providing a reliable network with guaranteed uptime for our global carrier interconnects. Use of private AWS servers, datacentre firewalls, and encryption of data in transit.

Application security

Secure protocols are used to keep your communications secure over public networks. Encryption and multi-factor authentication is used via HTTPS.

Service security

Cloud Virtual Machine – Amazon’s Virtual Machines are designed to be secure by default keeping Aculab Cloud highly secure.

Payment security

Private and secure payment – all transactions and payment information is protected by a third party vendor, SagePay. Aculab Cloud does not see or store credit or debit card information.

Data privacy

Private and secure payment – all transactions and payment information is protected by a third party vendor, SagePay. Aculab Cloud does not see or store credit or debit card information.

Encryption

Our encryption capabilities for media storage are not only used for meeting healthcare regulations. If you need to protect sensitive data such as voice recordings or fax image files, then take advantage of our free encryption capabilities

Security encryption

Documentation

Walkthrough guides, application and deployment notes, datasheets, case studies and white papers.

Learn more about what you could do with Aculab Cloud.

Getting started on Aculab Cloud

Writing your first SMS application

The Aculab Cloud guide to IVR

How to create a conference service

How to use speech recognition in Aculab Cloud applications

Benefits of using voice for appointment reminder systems

Implementation services to assist with your Aculab Cloud deployment

Local clouds and data sovereignty

Aculab Cloud appointment reminder system

Aculab Cloud fax solution

Aculab Cloud message broadcast system

Aculab Cloud IVR solution

Aculab Cloud datasheet

AI-AMD datasheet

AI-AMD case study - OCTA

Property management case study - VoiceScape

Appointment reminders case study - eClinicalWorks

Automated surveys case study - VirtuaTell

Voice broadcast case study - Alert Solutions

IVR case study - BeQuick Software

Mass outbound case study - Try Apt

Finance and banking case study

Accelerating innovation for healthcare applications using Aculab Cloud

Cloud contact centre white paper

Cloud ROI white paper

HIPAA and privacy white paper

Telephone-based speech analytics in the healthcare industry white paper

Installation guides, API References, and other technical documentation

Contact Aculab

+44 (0) 1908 273800 (UK)

+1 (781) 352 3550 (USA)

This email address is being protected from spambots. You need JavaScript enabled to view it.

This email address is being protected from spambots. You need JavaScript enabled to view it.

This email address is being protected from spambots. You need JavaScript enabled to view it.