- Home
- HIPAA & security
Your patients’ data is protected at every step
Revenue cycle work touches protected health information every day. ClaimEdgeSolutions follows the HIPAA Privacy and Security Rules with administrative, technical and physical safeguards built into every workflow.
How we protect PHI
Business Associate Agreement
A BAA is signed with every client before we access any protected health information (PHI).
Role-based access
Team members only access the systems and records required for their role (minimum necessary standard).
Multi-factor authentication
MFA is required on every system that stores or processes PHI.
Encrypted transfer & storage
Data is encrypted in transit and at rest. PHI is never sent by unsecured email.
Workforce training
HIPAA and security training at hire and every year, with signed confidentiality agreements.
Audit logging
Access and activity are logged and reviewed to detect unusual behavior.
Secured workspaces
Clean-desk policies and controlled workstations with no local storage of PHI.
Offboarding & retention
Access removed promptly when a role ends; data handled according to client agreements.
Breach response
If a security incident is suspected, our incident response process isolates the issue, investigates scope, and notifies affected clients without unreasonable delay and within the timeframes required by HIPAA and our Business Associate Agreements.
Questions about compliance?
Contact our compliance team at info@claimedgesolutions.com to request our BAA template or security documentation.
See where your revenue is leaking
Get a free, no-obligation revenue audit. We review your A/R, denials and coding patterns and show you exactly what is recoverable.