A business associate agreement comes first
We sign a business associate agreement with you before any patient data is shared. Scoping uses counts only.
DATA SERVICES
How we handle your data
These rules apply to every review. They are written into the signed agreement.
Only the minimum necessary
We ask for the fields a check needs and no more. Counts come first. Patient-level fields come only where a check cannot be done without them.
Encrypted
Your data is encrypted in transit and at rest.
One person has access
Only the reviewer on your engagement can access your data, with multi-factor sign-in.
Deleted within 30 days
We delete your data within 30 days after the work ends, and confirm the deletion to you in writing.
Never sold
Your data is never sold. It is never used for another client, a benchmark or a product.
No AI tool or cloud service without a BAA
Your patient data never goes into an AI tool or a cloud service unless that vendor has signed a business associate agreement with us. That includes the AI tools we use to build this business.
No referral fees
We take no referral or placement fees from billing companies or software vendors.