Is WaiverFile HIPAA-Compliant?

Yes. WaiverFile is self-certified in compliance with the Health Insurance Portability and Accountability Act of 1996 (HIPAA) privacy and security standards and the Health Information Technology for Economic and Clinical Health (“HITECH”) Act of 2009. HIPAA is based on NIST standards and enforced by the Office for Civil Rights (OCR). OCR and Health and Human Services (HHS) guidance define HIPAA regulation.

In situations where HIPAA-related data elements must be captured, WaiverFile enters into a Business Associate Agreement with our customers. Our customers assume the role of a Covered Entity, as defined in HIPAA regulation. WaiverFile assumes the role of a Business Associate.

HIPAA accounts also get stricter two-step verification (two-factor authentication, or MFA) for admin logins: codes come from an authenticator app or text message, not email, and a remembered browser asks for a new code every 7 days.

I need a copy of WaiverFile’s Cybersecurity Policy documentation to satisfy an internal assessment

Please reach out to privacy@waiverfile.com to initiate the process.