HIPAA Compliance

Roles and responsibilities

When your practice uses Clineos to store protected health information, your practice is the covered entity and Clineos acts as a business associate. Each side has obligations: we protect the information we process for you, and your practice controls who may access it and how it is used in care.

Business associate agreement

A signed business associate agreement is required before protected health information is stored in Clineos. Contact us to request the current agreement for your practice.

Safeguards

Administrative, physical, and technical safeguards for the Clineos platform will be listed here once confirmed with our team, covering areas such as access control, audit logging, encryption, workforce training, and incident response.

Breach notification

If we discover a breach of unsecured protected health information, we will notify the affected practice without unreasonable delay and provide the information needed for the practice to meet its own notification obligations.

What practices should do

• Give each staff member their own account with the minimum access their role requires.
• Remove access promptly when someone leaves the practice.
• Keep devices used to access Clineos locked and up to date.
• Report suspected security issues to us straight away.

Contact

Questions about HIPAA and Clineos can be sent to our compliance contact.

Placeholder: this page deliberately makes no certification, audit, or encryption claims yet. Send us the specific safeguards, agreements, audit results, and compliance contact you can stand behind, and we will publish those exact details.