HIPAA Statement

NHCS is designed and operated as a HIPAA-compliant platform. We serve as a Business Associate to home health care agencies (Covered Entities) and implement comprehensive safeguards to protect Protected Health Information (PHI).

Business Associate Agreement

NHCS executes Business Associate Agreements (BAAs) with all agency customers. The BAA defines our responsibilities for safeguarding PHI, breach notification procedures, and permitted uses and disclosures.

Administrative Safeguards

We implement: role-based access control with least-privilege principles; workforce training on HIPAA compliance; designated security officers; incident response procedures; and regular risk assessments.

Physical Safeguards

Platform infrastructure is hosted in SOC 2 Type II and HIPAA-compliant data centers with controlled facility access, environmental controls, and physical security monitoring.

Technical Safeguards

We implement: encryption in transit (TLS 1.2+) and at rest (AES-256); agency-scoped data isolation; immutable audit trails; automatic session timeout and PHI lock controls; screenshot blocking and watermarking on mobile devices.

Breach Notification

In the event of a suspected or confirmed breach of unsecured PHI, NHCS will notify the affected Covered Entity without unreasonable delay and in no case later than 60 days from discovery, in accordance with 45 CFR §164.410.

PHI Shield

Our PHI Shield security suite provides multi-layered protection including auto-lock, screenshot blocking, PHI watermarks, PIN-protected printing/exporting, and zero-trust access validation.

Contact

For HIPAA-related questions, contact our compliance team at compliance@nethomecaresolutions.com.