How your data is held
Healthcare Data Security & HIPAA-Compliant Protection
Your patients' protected health information needs careful handling. This page sets out how we protect it.
Key takeaways
- 01Healthcare data breaches cost an average of $7.42M per incident (IBM's 2025 Cost of a Data Breach Report) - the highest of any industry for 14 consecutive years.
- 02The Medtransic client portal runs on Amazon Web Services under a signed Business Associate Agreement, and its files are stored encrypted.
- 03HIPAA's Security Rule requires a risk analysis of where protected health information could be exposed.
- 04Security controls lower the risk of a breach, and of the investigation and damage that follow one.
Where Your Data Lives
The Medtransic client portal runs on Amazon Web Services under a signed Business Associate Agreement. Files travel over HTTPS and are stored encrypted, and access is limited to authorized staff.
Comprehensive Security Measures
Our multi-layered security approach protects your data at every level
Encrypted Files
Client portal files travel over HTTPS and are stored encrypted.
Secure Infrastructure
The client portal runs on Amazon Web Services under a signed Business Associate Agreement.
Access Controls
Every Medtransic staff account on the portal uses two-factor authentication, and access is limited by role.
Ongoing Monitoring
System access and activity logs are reviewed to help identify unusual activity.
Security Reviews
Access controls and security practices are reviewed on an ongoing basis.
Staff Training
All team members receive ongoing HIPAA and security awareness training.
Compliance
The regulatory frameworks that govern how we handle protected health information
HIPAA
HITECH
Data Handling Practices
Data Collection
- Minimal data collection principle
- Purpose limitation and consent
- Secure data transmission protocols
Data Storage
- Encrypted databases and file systems
- Secure data retention policies
Security Incident Response
Our comprehensive incident response plan ensures rapid detection, containment, and resolution of any security events:
Detection
Access logging and alerting on unusual activity
Containment
Immediate isolation and threat mitigation
Notification
Client and regulatory notification
Recovery
System restoration and improvement
Questions About Data Security?
Our security team is available to discuss our data protection measures and answer any questions about how we keep your information safe.