Security is part of how OliMed works.
OliMed is built for the trust independent medical practices place in us. Patient data is protected by business associate agreements, a documented HIPAA program and controls across the platform.
A documented HIPAA program and business associate agreements.
We sign business associate agreements with our practice customers and maintain a written HIPAA program covering risk analysis, workforce training, vendor management and incident response.
Patient data is processed through approved services under business associate agreements. Our covered cloud services include Microsoft Azure and Google Cloud.
Protection across access, storage and operations.
Data is encrypted in transit and at rest. Practice-specific identities, access controls and source permissions govern access to connected systems and information.
Monitoring, audit records, backups and incident response support the service. Customer data is used to provide the service; we do not sell patient information.
Independent assurance and continuous monitoring.
We maintain 23 security and privacy policies and continuous control monitoring through Secureframe. A-LIGN is engaged for SOC 2 Type I and Type II examinations, which are in progress.
Get the evidence your team needs.
Our security team provides the materials needed for vendor diligence, including security questionnaires, business associate agreements and information about data handling, subprocessors, retention and deletion. Detailed assurance materials are shared directly with authorized reviewers.