HIPAA

From June 2022, we are offering a HIPAA add-on to our Enterprise bundle customer. You can read the announcement blog here.

If you operate in the healthcare industry, then you’re likely already familiar with the Health Insurance Portability and Accountability Act of 1996 (’HIPAA’), a United States federal law that establishes data privacy and security requirements for organizations that are accountable for safeguarding PHI. In order to provide services to entities subject to HIPAA standards, technology providers such as Dovetail must build tools, processes, and procedures with the appropriate technical and organizational safeguards governing both the technologies they build and the business policies and procedures around their use. It’s important to note that there is no formal certification for HIPAA compliance and that complying with the standards set out in HIPAA is a shared responsibility between Dovetail and our customers.

Our new HIPAA offering comes with access controls and features to help manage PHI, such as advanced restrictions on sharing, access, and data exporting. Some of the key features of our HIPAA solution include:

→ Ability for users to export CSV files disabled by default

→ Ability for users to download video files disabled by default

→ Public access to, and sharing of, insights disabled by default

→ Enforced authentication via SSO with email/password authentication disabled

→ All sub-processors processing ePHI have entered into a BAA with Dovetail

→ Ability to enter into a Business Associate Agreement (’BAA’) with Dovetail

While the Dovetail HIPAA workspace provides customers with greater access controls to help manage PHI, it is important to note that it is the responsibility of the workspace admin to control who within their organization has access to the contents of the workspace.

Please note that the transcription functionality in our HIPAA workspace is available in English language only.

Dovetail Enterprise customers who purchase the HIPAA add-on can enter into a BAA with us. To engage, review or sign a BAA with us, please contact our Enterprise team for more information.

Our HIPAA solution is packaged as an optional add-on to our Enterprise bundle that customers can choose to purchase. 

If you are an existing customer, you can contact your Customer Success Manager regarding the HIPAA add-on. 

If you are a new customer who is interested in the Enterprise bundle with HIPAA add-on, you can learn more here.