HIPAA
VIDIZMO is not a healthcare provider. Many of our customers and use cases are in healthcare and need HIPAA compliance, and VIDIZMO provides the safeguards to get them there, across every product.
What It Is
The Health Insurance Portability and Accountability Act (HIPAA) sets requirements for protecting health information in the United States. It applies to healthcare providers, health plans, and their business associates, organizations that handle protected health information (PHI) on a covered entity’s behalf.
Where VIDIZMO Fits
VIDIZMO is not a healthcare provider, health plan, or insurer, and does not bill for medical services. Our customers and use cases very much are in healthcare: agencies and organizations across DEMS, EnterpriseTube, and Redactor regularly handle health-related records, from medical evidence to patient video and audio. When a customer stores or processes PHI on the platform, VIDIZMO functions as that customer’s business associate under HIPAA, and helps them meet their HIPAA compliance obligations through the technical, administrative, and physical safeguards described below.
What HIPAA Majorly Requires, and How VIDIZMO Supports It
- Technical safeguards (access control, audit controls, integrity, and transmission security): SSO, MFA, and role-based access control on a least-privilege basis; AES-256 encryption at rest and TLS in transit; real-time audit logging retained in tamper-evident, immutable storage.
- Administrative safeguards (risk analysis and workforce training): covered by VIDIZMO’s Information Security Program, including onboarding and annual security awareness training for staff.
- Physical safeguards (facility and workstation security): handled at the Microsoft Azure data center level.
- Breach Notification Rule (notify affected parties without unreasonable delay): VIDIZMO commits to notification within 2 business days of confirmation.
