- Based upon decades of experience, B&M knows that every transcription vendor out there will say they are HIPAA compliant; however, our internal security protocols clearly set us apart from our competitors. At B&M we are well aware of the dangers in faxing, file sharing and emailing sensitive information relating to PHI, HIV infection status, substance abuse treatment, and mental health records. For this purpose, the following internal security measures, outside of the WebChartMD platform, are in place to ensure both security and proficiency in data use and control:
HIPAA COMPLIANT FAXING
- Secure, HIPAA compliant faxing (send and receive). B&M utilizes a cloud-based, HIPAA compliant faxing platform called Sfax by Scrypt, Inc. Sfax was designed to withstand the rigors of healthcare. Sfax enables you to send, receive, annotate, digitally sign and manage faxes without printing a single physical document. All your documents are protected by strong encryption with SSAE16 Type 2 data centers.
HIPAA COMPLIANT FILE SHARING AND EMAILING
- For clients that do not utilize our dictation and transcription platform, WebChartMD, audio files can be sent to us for transcription via Sharefile by Citrix. Completed transcripts can also be placed into Sharefile for retrieval. Sharefile is available 24/7/365. Files are kept secure during transfer with SSL/TLS encryption protocols. In the cloud, storage of your files is kept safe using AET 256-bit encryption. Sharefile also allows B&M to email files to our clients utilizing the built-in Microsoft Outlook plugin that encrypts the file that’s being sent.
B&M has on file bilateral BAA agreements (Business Associates Agreements) with both Sfax and Sharefile.