Encryption (AES-256 / TLS 1.3)
The process of converting data into a coded format that can only be read with the correct decryption key. AES-256 (Advanced Encryption Standard with 256-bit keys) is used for data at rest. TLS (Transport Layer Security, version 1.2 or newer, ideally 1.3) encrypts data in transit between the patient's device and the server. HIPAA treats encryption as an addressable safeguard, and in practice both are expected.
How this works in FormisoftRelated terms
- HIPAAHealth Insurance Portability and Accountability Act, a US federal law enacted in 1996 that establishes national standards for protecting sensitive patient health information. HIPAA includes the Privacy Rule (who can access PHI), the Security Rule (technical safeguards required), and the Breach Notification Rule (what to do if data is compromised). Any healthcare provider or vendor handling patient data must comply.
- PHI (Protected Health Information)Any individually identifiable health information held or transmitted by a covered entity or its business associates, in any form (electronic, paper, or oral). PHI includes 18 specific identifiers such as names, dates, phone numbers, email addresses, Social Security numbers, and medical record numbers when connected to health data.
Get every patient ready before the visit.
Start with Intake, then add booking, reminders, and payments when you need them.
Cancel anytime · BAA included