HIPAA Compliance


In today's fast-paced medical landscape, healthcare providers recognize the immense potential of AI technology in revolutionizing patient care and administrative processes. However, the stringent requirements of HIPAA (Health Insurance Portability and Accountability Act) have often posed a significant hurdle. Many providers are eager to harness the power of AI but are cautious about using open AI solutions due to HIPAA compliance concerns. At Mappill.AI, we understand these challenges intimately. That's why we have meticulously crafted our medical transcription services, leveraging Microsoft Azure's private OpenAI GPT to guarantee both the transformative benefits of AI and full adherence to HIPAA regulations. With Mappill.AI, medical professionals can confidently embrace the future of healthcare technology, knowing that their patients' data is secure and their practice is fully compliant with regulatory standards.

Website security

Our web application platform is fortified with SSL (Secure Sockets Layer) encryption and HTTPS protocols. Every interaction you have with our website, from dictation, to transcription, to AI formatting is encrypted and secure.

Network security

Mappill.AI’s backend web services are shielded within virtual private networks which can only be accessed when authenticated (via Microsoft’s Authentication Service) or through specific granted network ports and VPNs.

BAAs

Mappill.AI is your business associate that transcribes and formats your patients' PHI. We are covered by Microsoft under their HIPAA Business Associate Agreement (BAA). Our other software vendors also have signed BAAs with us.

PHI

The confidential nature of your dictations, containing Protected Health Information (PHI), has us committed to ensuring high standards of data security and compliance. We understand the importance of your patients' privacy and the sensitive nature of healthcare information.

Secure authentication

Your user authentication is done via OTP (one time passcodes) sent to your email (or a Microsoft account if you have one). Therefore, Mappill.AI doesn’t store, manage or retain users’ passwords avoiding any possibility of user credential breach from Mappill.AI’s side.

No Storage Policy

At no time during using the application is any audio or your transcription results saved to file, retained, logged, or backed-up on Mappill.AI’s or any of its software vendors’ servers. The dictated audio is temporarily stored in-memory on your device, streamed to Mappill.AI’s software services and the results are sent back to you.

Data Privacy

We use closed and private OpenAI based technologies to perform the transcription and medical note formatting. Mappill.AI’s closed AI solutions never shares (even within Mappill.AI) any of your results (audio, notes, etc). for AI training purposes.

Training

Employees at Mappill.AI undergo HIPAA and HITECH training courses and are well-versed with PHI and PII.

Incident notification

As part of HIPAA compliance, in the unlikely event of a leak or breach of your private data, Mappill.AI's shall promptly email you and cooperate in good faith in any investigation of the breach or security incident.


For questions regarding HIPAA at Mappill.AI email: privacy@mappill.ai