HIPAA & BAA
How MediCRM supports your HIPAA program
A software platform can provide safeguards that support HIPAA obligations, but no platform alone makes an organization compliant.
HIPAA-Aligned Safeguards
PHI encrypted in transit & at rest
42 CFR Part 2 Controls
Substance-use privacy protections
BAA Available
Business Associate Agreement
Org-Level Isolation
Separation at the database layer
Business Associate Agreement
A BAA is available for customers who require one as part of their compliance program.
Safeguards we provide
- Access controls, MFA and audit trails
- Encryption of PHI in transit and at rest
- Secure clinical messaging
- Consent & release management
- Organization-level data isolation
- Configurable retention controls & data export
What remains your responsibility
HIPAA compliance depends on your complete program:
- Risk analysis & workforce training
- Access-management procedures & incident response
- Backup, disaster recovery & device/facility safeguards
- Vendor management, policies & ongoing monitoring
This page describes product capabilities for informational purposes and is not legal advice. HIPAA compliance depends on your organization's complete program, policies, and Business Associate Agreement. No software alone makes an organization compliant.