Differences

This shows you the differences between two versions of the page.

--- hipaa [2022/06/10 18:37] – created jim
+++ hipaa [2023/12/27 16:02] (current) – [HIPAA COMPLIANCE] jim
@@ Line 1: / Line 1: @@
 =====HIPAA COMPLIANCE=====
-{{ :hipaa.jpg?nolink&400|}} **A phone system or service is neither HIPAA compliant or not. Like all of your medical office equipment: Policy, procedure, and usage defines it's compliance. Ring-u's Hello Hub and Secure VoIP service is specifically designed and implemented to make HIPAA compliance practical.**
+{{:hipaa.jpg?nolink&400|}} \\ **A phone system or service is neither HIPAA compliant or not. Like all of your medical office equipment: Policy, procedure, and usage defines it's compliance. Ring-u's Hello Hub and Secure VoIP service is specifically designed and implemented to make HIPAA compliance practical.**\\
+Ring-u is neither claiming HIPPA compliance, not denying that it is HIPPA compliant. Such compliance is a mix of technologies that ring-u can control, and procedures and usage that ring-u can not control.\\ \\
+As with our upstream provider, it is our position that we fall under a "conduit exception" as further detailed here: https://support.telnyx.com/en/articles/3347891-hipaa-baas-and-the-conduit-exception \\
 ====Secure Communications====
@@ Line 21: / Line 22: @@
 ====Addressing Lore====
 There is no reason VoIP is or is not HIPAA compliant. It is at least as secure as a "POTS" (Plain Old Telephone Service) or any digital (T1/PRI/ISDN) delivery method, and **in most cases VoIP is much more secure**. This is false lore spread by non-VoIP providers. In 2019+, almost all phone traffic is packetized, digitized, and VoIP in transport over the public internet at some point.\\
+When using a ring-u Hello Hub, all calls in and out of your location are encrypted and spread over random ports. Your end of the connection is as secure as we can make it, and while not impossible to tap, it is much more secure than the typical analog or digital/VoIP phone system. The other end of any phone call is beyond our control.
 Fax is not expressly HIPAA compliant. Fax is a 150+ year old analog protocol that on an analog phone line can be recorded, tapped and replayed. Doing fax over VoIP using SRTP and TLS-encrypted T38 digital transport makes it as secure as practical, as far as possible. The other end may be using plain old phone lines.\\
@@ Line 32: / Line 35: @@
   * [[https://www.hhs.gov/hipaa/for-professionals/faq/482/does-hipaa-permit-a-doctor-to-share-patient-information-for-treatment-over-the-phone/index.html]]
+//**note -** If you have specific questions, please ask. We'd love to help, and if there is a way we can address the technology issues for better HIPPA compliance, we will.