Home / HIPAA & security
Zero-trust approach to patient data
HIPAA and how we protect patient data.
Billing means handling protected health information. Here is exactly how we do it, from the first signature to the day access ends.
- BAA before any access
- HIPAA-trained team
- Nothing stored on our devices
How we keep patient data safe
The same safeguards on every account, whatever your size.
Business Associate Agreement first
We sign a BAA with every practice before we receive any access or patient information.
We work in your systems
Claims, notes and patient data stay in your EHR and clearinghouse. We never download or store them on our own computers, drives or email.
Multi-factor authentication
We use MFA wherever your systems support it.
Training and confidentiality
Every team member is HIPAA trained and signs a confidentiality agreement before working on any account. Training certificates on request.
Company-managed computers
Work is done on company-managed computers. Patient information is never stored on phones or personal drives.
Access removed when work ends
When a team member leaves or a contract ends, access is removed the same day and we confirm it with you.
We never store a single byte of your patient data on our own systems.
Everything happens inside the systems you already control, under a signed Business Associate Agreement. If we ever suspect a breach, we notify you promptly, as the BAA and HIPAA require.
Request our BAAHIPAA and security questions
Still unsure? Email info@carerevenuemanagement.com or call (850) 515-4548.
Do you sign a Business Associate Agreement?
Yes, always, and before we receive any access or patient information. We can send our standard BAA or review yours.
Where is patient data stored?
In your own EHR and clearinghouse. We work inside your systems and never download or store patient data on our own computers, drives or email.
Is your team HIPAA trained?
Yes. Every team member is HIPAA trained and signs a confidentiality agreement before working on any account. We can share training certificates on request.
What happens to our access when we stop working together?
Access is removed the same day the contract ends, and we confirm it with you.
Ready when you are
We’ll send our standard BAA as the first step of your free claims review.