Health Insurance Portability and Accountability Act (HIPAA)

Health Insurance Portability and Accountability Act (HIPAA)

At Karantis360 Limited we take security of your data very seriously and as such we are HIPAA complaint and we only work with HIPAA complaint partners such as Microsoft https://www.microsoft.com/en- us/TrustCenter/Compliance/HIPAA and IBM https://www.ibm.com/developerworks/cloud/library/cl- hipaa/index.html. HIPAA, the Health Insurance Portability and Accountability Act, sets the standard for protecting sensitive patient data. Any company that deals with protected health information (PHI) must ensure that all the required physical, network, and process security measures are in place and followed.

This includes covered entities (CE), anyone who provides treatment, payment and operations in healthcare, and business associates (BA), anyone with access to patient information and provides support in treatment, payment or operations. Subcontractors, or business associates of business associates, must also comply.

The HIPAA Privacy Rule addresses the saving, accessing and sharing of medical and personal information of any individual, while the HIPAA Security Rule more specifically outlines national security standards to protect health data created, received, maintained or transmitted electronically, also known as electronic protected health information (ePHI).

So, what does this mean to you?

Data security is paramount, and we plan extensively to ensure that we protect your data. But what do we store and how do we store it?

The private information that we store is:

• Your name
• Family member(s) name(s)
• Your email address & phone numbers and those of a family member(s) using the application
• KarantisFacts (care information relating to the client (patient))
• Care related data input by your care agency(s)
• Photo images taken during care visits
• The content of care reports

We protect this information with the latest encryption software and all data stored is encrypted at rest. Any information retrieved and displayed on mobile devices for use by your Carer or Family Member isn’t stored on the mobile device, it can only be viewed, so if the device is lost or stolen your data is still protected. By the 2nd May 2018 you will be prevented from taking screenshots of the mobile device.

Our application has an idle time lockout of 5 minutes, so if the application isn’t used within 5 minutes the user will need to log back into the application.

Where is your data stored?

All your data is stored directly into the cloud, this is storage provided by Microsoft and/or IBM, and our databases are located within their datacenters and behind the firewalls designed to protect and segregate the information for Karantis360 Limited access only. If you are a US based company your data is designed and stored within a US datacenter.