HIPAA Compliance Statement
Review the structural, administrative, and technical safeguards Roghtoon maintains to keep Patient Health Information (PHI) secure.
The Health Insurance Portability and Accountability Act (HIPAA) sets the standard for sensitive patient data protection. Roghtoon is engineered from the ground up to fulfill these requirements.
Security & Encryption (45 CFR § 164.312)
All health records, demographics, laboratory orders, and prescriptions are protected with AES-256 encryption at rest. Connections to our servers use HTTPS/TLS 1.3 to secure data in transit.
Access Controls & Unique ID (45 CFR § 164.312(a))
Every clinic practitioner and staff member receives a unique ID. Role-Based Access Control (RBAC) ensures users only access resources permitted by the clinic administrator.
Audit Controls & Access Logs (45 CFR § 164.312(b))
Roghtoon registers every read, write, edit, and deletion of patient records. Audit trails are immutable and saved to ensure absolute accountability.
Business Associate Agreements (BAA)
Roghtoon acts as a Business Associate for our tenants. We sign standard BAAs to assume legal responsibility for the protection of clinical records and data pipeline operations.
Business Associate Agreement (BAA) Requests
Prior to uploading clinical data onto Roghtoon, enterprise clinic networks can request, review, and execute our Business Associate Agreement. Signing a BAA guarantees that our system complies with federal security criteria.
Please visit our Support Center for further assistance.