Applies to: Accounts that handle personal health information
Is Votel HIPAA compliant, and how does the HIPAA add-on work?
Yes. HIPAA compliance is available as an add-on for accounts that handle personal health information (PHI), such as clinics, doctors and other medical businesses. It costs $497 a month, billed monthly in addition to your plan.
- Go to Settings, then Billing, and add the HIPAA add-on to your main (agency) account.
- Execute the BAA (business associate agreement) with us. You need both the add-on and the signed BAA before you store any health information.
One add-on covers your main account and all of your sub-accounts, unlimited, so you pay it once and not per client.
You will know you need it when a client asks you to sign a BAA: that means they store PHI. We sign a BAA with you, and you sign a BAA with each client that handles health information, so there is a chain of BAAs. You do not need a BAA with sub-accounts that hold no health data. Rely on your medical clients to tell you what is and is not covered by HIPAA, since they know what they need. If you are serving clinics, talk it through with our support team.
The add-on covers the compliance requirements for protecting health information, including different handling such as logging. It covers your CRM data such as contacts. Custom apps you build are not claimed to be HIPAA compliant.
Once added, the HIPAA add-on cannot be removed, because health information that has been protected cannot be unprotected. It stays for the life of the account. If you ever want an account without it, you would need to create a new account.
The HIPAA add-on is not included in the 5 Day Challenge.