•

Anyone (employees, contractors, vendors) who accesses PHI has a unique user login and password.

•

Medical transcriptionists, editors, quality assurance personnel and auditors work on one centrally networked platform (GEMSTAR™) so access can easily be monitored.

•

Information system activity is routinely reviewed via audit logs, access reports and security incident tracking reports.

•

Triple Data Encryption Standards (3DES) are administered through a Virtual Private Network (VPN) tunnel.

•

Firewalls protect against viruses or other intrusions so that information cannot be altered or destroyed.

•

High-availability data center and data archival office is maintained offsite.

•

Security measures ensure that our transcription centers, data center and corporate offices are protected from unauthorized individuals.

•

Comprehensive data backup, storage plan and system redundancy protect integrity and availability of patient data.

•

Employees, contractors and vendors are required to follow the AHDI Code of Ethics.

•

Employees, contractors and vendors are required annually to sign confidentiality agreements.

•

Contractors and vendors are required to sign business associates agreements.

•

Regular audits of employees, contractors and vendors are conducted to assure accountability for PHI.