HIPAA Compliance

Getting a BAA for HIPAA Compliance

ActiveDEMAND has a strong focus on security. For customers in the healthcare sector who process Electronic Personal Health Information (ePHI), ActiveDEMAND can help support compliance by executing a Business Associate Agreement (BAA) along with the customer.
For customers who are processing ePHI and are bound by HIPAA, they have to follow mandatory steps to establish a Secure Operating Environment (SOE). Steps include:

SOE Compliance

JumpDEMAND, ActiveDEMAND, the JumpDEMAND logo, among others, are trademarks and/or service marks of JumpDEMAND.

Restrict Access

ActiveDEMAND supports multiple roles with different access capabilities. Employees and agents should only have the minimum access levels required to do their job.

IP Whitelisting

Whitelist IPs to only those users who should be able to access the platform.

Agent end-point computer security

Customers wishing to remain HIPAA-compliant must keep employee and agent endpoints (computers, phones, and any device used to access ActiveDEMAND) secure. Software must remain up to date, and logins must be appropriately difficult to attack. Consult your IT company for guidance on securing endpoint access.

SSL

Using secure SSL communication is required. ActiveDEMAND requires secure HTTPS and SSL to access the platform.

Mandatory Two-Factor Authentication (2FA) and password complexity

2FA and password complexity standards may be set inside ActiveDEMAND and enforced on users.

User Data Rights

ActiveDEMAND supports user data rights. Customers can configure ActiveDEMAND to allow end users to download and/or request deletion of their data (similar to a “Forget me” request in GDPR or personal data deletion requests in CCPA)