|
Overall Statement
System Monitoring
Firewalls
Secure Socket Layers (SSL)
Encryption
Data Storage
Privacy & Confidentiality
Security
Statement
Read
our HIPAA Preparedness Statement
Overall Statement
Medical Electronic Billing is committed to safeguarding
your security and has implemented several lines
of defense to protect you. We use industry-standard
hardware and software in combination with authentication
and certification by third parties to protect
the transmission of data, the processing of data
and storing data.
We have taken extensive steps to ensure that
any data transmitted by our users cannot be intercepted,
viewed, or blocked by unauthorized parties. We
have also established policies telling our users
how we use and store their information.
Medical Electronic Billing is committed to maintaining
a secure environment to store and receive your
sensitive information. We have taken every precaution
to protect your data and are constantly improving
our security procedures. We will continue to make
data security a top priority as new technologies
become available.
System Monitoring
We constantly monitor our web security in order
to protect the integrity of your data transmissions.
We monitor user access, password changes, account
modification, file uploads, file downloads, and
deleted files. Medical Electronic Billing uses
these systems and application activity logs to
protect our systems and your information. These
logs are reviewed regularly and any anomalies
or discrepancies are thoroughly investigated.
Firewalls
As a second layer of protection, Medical Electronic
Billing utilizes advanced firewall technology
to protect our user database from outsiders. This
is a system designed to prevent unauthorized access
to or from a private network, such as our web
servers, when connected to the Internet. Data
entering or leaving our network must pass through
the firewall, which examines each message and
blocks those that do not meet our specified security
criteria. Medical Electronic Billing also features
a high-speed wireless Internet connection. This
means data travels through space, not wires, making
it more difficult for anyone to intercept your
information.
Once your information is received at Medical
Electronic Billing, access to your information
is limited to data personnel. We use internal
firewalls to restrict employee access to your
patient data. Only employees directly involved
with processing your statements have access to
data files. Each employee is provided with a copy
of this document so that they are aware of our
security practices.
Secured Socket
Layers (SSL)
On our FTP (File Transfer Protocol) site, we
use a server-based Secure Socket Layer (SSL) technology
in the transmission of logon identification and
passwords. SSL technology provides advanced encryption
tools that convert the information you input into
code before it is sent to us and ensures secure
data transmission over the Internet.
The browsers that Medical Electronic Billing
web based services currently support are listed
below. These browsers provide 128-bit security
with strong encryption capability. Encryption
means that your information is converted into
bits of code before it is securely sent over the
Internet. This scrambled data cannot be read as
it travels through the Internet.
SSL is a protocol originally developed by Netscape
for transmitting private documents via the Internet.
Browsers from Netscape (v. 2.0 and higher) and
Microsoft (v. 3.0 and higher) both support SSL.
Many web sites, including Medical Electronic Billing
use the protocol to transmit user information
securely. Equifax, a leading Internet security
company, certifies these controls. SouthWest Direct
holds an Equifax Secure Server
Digital ID.
Encryption
Encryption is the process of scrambling information,
typically for data transmission. When used between
you and Medical Electronic Billing, this technology
encrypts your patient billing information as you
send it to us, which only Medical Electronic Billing
can decrypt. Your username and password are also
kept encrypted at all times so they cannot be
decoded.
Data Storage
As a last line of defense, Medical Electronic
Billing has taken precautions to store any patient
information you submit on a separate database
server, and not on our web server. Therefore,
even if someone gains unauthorized access to our
Web site, it would not be possible to access your
patient data.
Privacy and Confidentiality
Data sent to us by our clients is used solely
for client projects as they relate to printing
and mailing of patient billing statements. Client
data is client property and is never sold, transmitted
to a third party, or otherwise manipulated. Medical
Electronic Billing will not disclose or transmit
any client data to any third party without your
expressed permission.
To ensure the confidentiality of your information
and that of your patients, Medical Electronic
Billing has each employee sign a confidentiality
agreement. Under terms of the agreement, all employees
agree not to use, publish or disclose, or permit
others to use, publish or disclose, any confidential
information they may come in contact with. Violation
of this agreement warrants termination. A copy
of this confidentiality agreement is available
upon request.
|
