Supporting HIPAA Compliance with Preservica
Preservica's HIPAA Security and Privacy safeguards have been independently assessed for the management and storage of ePHI – subject to the customer and Preservica signing a BAA.
Preservica HIPAA Safeguards
Summary document of Preservica’s HIPAA related administrative, technical and physical safeguards.
HIPAA Shared Responsibility Model
How Preservica safeguards your ePHI data and what your responsibilities are.
HIPAA Safeguards assessment
Confirmation of the assessment of Preservica’s HIPAA compliance program by independent cyber security firm.
Preservica meets its obligations as a Business Associate for Covered Entity customers
Preservica acts as a Business Associate to government and private healthcare providers, health plans and other Covered Entities, storing and preserving electronic Protected Health Information (ePHI) on their behalf in Preservica cloud services hosted on AWS or Microsoft Azure.
A Business Associate Agreement must be signed before any ePHI is exchanged or stored, so responsibilities for safeguarding your health information are clear from day one.
HIPAA-ready Archiving
Conventional archiving stores records. Preservica's Active Digital Preservation keeps ePHI, research and business records protected – and instantly readable – for decades.
Respond fast and with confidence to Release of Information requests, malpractice claims, continuity of care, audits and investigations. And unlock long-term research value.
Preservica’s HIPAA safeguards
Data is encrypted at rest and in transit.
Once ingested, files cannot be altered or deleted without two-stage authorization. Every file is fixity checked and regular integrity reports run to prevent file corruption or tampering.
Support for MFA (Multi-Factor Authentication) and granular, role-based access permissions enable customers to ensure only authorized individuals can view ePHI.
The software maintains immutable customer audit trails of who has viewed which folders and assets, and when – for Entity Access Reporting.
Consistent enforcement of records governance across the archive, including defensible disposition actions.
Files are automatically maintained in readable and actionable formats over decades, to ensure rapid response to Release of Information requests, malpractice claims, regulatory audits, investigations, or for research value.
Preservica runs an active program of HIPAA-specific staff training, policies and risk assessments.
Got more questions? Resource Hub | Contact us
HIPAA compliance with Preservica
Martyn Simpson, Preservica CISO shares the latest updates on our HIPAA compliance program.
Preservica HIPAA Datasheet
HIPAA-ready archiving and Active Digital Preservation for ePHI