Blog / HIPAA

HIPAA De-identification: Safe Harbor, Expert Determination and Limited Data Sets

HIPAA de-identification explained for HealthTech teams: Safe Harbor, Expert Determination and limited data sets, to safely use patient data for analytics or AI.

PHI in Logs: How to Keep Health Data Out of Your Application and Observability Logs

Keep PHI in logs under control: where sensitive data leaks into app, error and LLM logs, how to redact it, and which audit logs HIPAA still expects you to keep.

HIPAA Compliant Data Center: How to Choose a Colocation or Hosting Provider for ePHI

Choosing a HIPAA compliant data center: why no certification exists, what the BAA must say, which physical safeguards to verify and what evidence to request.

HIPAA Compliant Database: Requirements and Configuration Checklist for Storing PHI

What makes a HIPAA compliant database: Security Rule safeguards mapped to encryption, access, audit logs and backups, plus a configuration checklist for ePHI.

HIPAA Compliant Texting: When You Can Text Patients and How to Do It Safely

HIPAA compliant texting explained: when providers can text patients, the risks of standard SMS, and the safeguards and policy checklist that keep PHI protected.

HIPAA Permitted Uses and Disclosures: When PHI Can Be Shared Without Authorization

HIPAA permitted uses and disclosures explained for HealthTech teams: TPO, required and public-interest disclosures, and when PHI needs a signed authorization.

Who Does HIPAA Apply To? A Decision Guide for HealthTech and SaaS Founders

Who does HIPAA apply to? Learn the covered entity types, when vendors become business associates, who is exempt, and a step-by-step test for your company.

After SOC 2: The Compliance Roadmap for HealthTech Companies

Finished SOC 2? What HealthTech companies should tackle next: HIPAA, BAAs, HITRUST and ISO 27001, in the order buyers ask, reusing your existing controls.

AWS Control Tower and HIPAA: how to govern multi-account ePHI workloads

Learn how AWS Control Tower supports HIPAA compliance, landing zones, guardrails, ePHI account isolation, BAAs, and evidence workflows for healthtech AWS orgs.

Examples of HIPAA Violations

Examples Of HIPAA Violations. HIPAA guide for security and GRC teams: controls, evidence, audit readiness, and continuous compliance with SecureSlate.