HIPAA, PIPEDA and PHIPA compliant
Elvra maintains the processes and controls required for compliant use across U.S. and Canadian healthcare environments.
Security and privacy
Privacy by design for healthcare referral workflows.
Elvra is HIPAA, PIPEDA and PHIPA compliant, offers Business Associate Agreements for applicable U.S. customers and has a SOC 2 program in progress.
Business Associate Agreements
Elvra can enter into a Business Associate Agreement with applicable U.S. customers.
SOC 2 in progress
Elvra’s SOC 2 program is underway.
For specialty practices
Get the essentials for a confident review.
Use authorized access, human approval and a Business Associate Agreement for your referral workflow. Request Elvra’s current security materials when your team is ready.
For health systems
Support a complete security evaluation.
- Data flow and deployment information
- Access, tenant and identity controls
- Encryption and infrastructure information
- Subprocessor, retention and residency details
- Audit, monitoring and incident processes
- Current SOC 2 program status
External references
Official privacy and security references.
Applicable requirements depend on the organization, information, jurisdiction and data flow. These primary government sources provide the governing context for U.S. and Canadian evaluations.
HIPAA Security Rule
The HHS HIPAA Security Rule establishes safeguards for electronic protected health information in the United States.
PIPEDA
The Office of the Privacy Commissioner of Canada explains federal private-sector obligations in PIPEDA requirements in brief.
PHIPA
Ontario’s Personal Health Information Protection Act establishes rules for the collection, use and disclosure of personal health information.
Request Elvra’s current security materials.
Book a demo to discuss the security and privacy questions that matter to your organization.