- Home
- Security and Compliance
Patient data protected at every step
CliniQura products are built to meet HIPAA requirements, and every practice is covered by a signed Business Associate Agreement.
HIPAA compliance
Administrative, physical and technical safeguards cover how protected health information is stored, accessed and shared across our products.
Business Associate Agreement
We sign a BAA with every practice we work with. Enterprise customers can request a dedicated BAA and security review.
Safeguards built into every product
Encryption
- PHI encrypted in transit
- PHI encrypted at rest
- HTTPS on every page and connection
Access controls
- Each provider has their own login
- Practice admins manage seats and access
- SSO and SCIM provisioning on Enterprise
Audit and record keeping
- Every view, edit and export is logged
- Notes near their lock deadline are flagged
- Signed notes are never deleted
Data retention
- Visit audio removed once the transcript exists
- Custom retention policy on Enterprise
Privacy by design
- No patient information collected on website forms
- Analytics set up so patient data is never captured
Security questions
Need a security questionnaire completed? Email support@cliniqura.com.
Do you sign a Business Associate Agreement?
Yes. We sign a BAA with every practice that uses UScribe, and will do the same for CliniQura and ClerkRx customers.
Who can see patient records?
Each provider has their own login and notes. Practice admins manage which providers have seats, and every view, edit and export is recorded in the audit log.
How long does UScribe keep visit audio?
Audio is removed as soon as the transcript is generated. Enterprise plans can also set a custom retention policy for notes and transcripts.
Can you complete our security review?
Yes. Enterprise customers receive a dedicated BAA and security review. Email support@cliniqura.com to start.