HIPAA Compliance
MedCoreSync AI, LLC adheres to the privacy and security requirements of the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and its implementing regulations.
1. Our Role
When providing AI, automation, or data integration services to healthcare clients, MedCoreSync AI acts as a Business Associate under HIPAA.
2. Protected Health Information (PHI)
We protect all PHI in accordance with HIPAA’s Privacy, Security, and Breach Notification Rules. PHI includes any information that identifies an individual and relates to their health status, treatment, or payment for healthcare services.
3. Safeguards
- All PHI is encrypted at rest and in transit (AES-256 encryption).
- Access is granted on a strict need-to-know basis with multifactor authentication.
- Audit logs, risk assessments, and ongoing employee HIPAA training are maintained.
- Breach notification protocols align with federal and state timelines.
4. Business Associate Agreements (BAA)
We enter into formal BAAs with covered entities and business associates prior to receiving or processing PHI. Our BAA outlines permissible uses, required safeguards, and breach reporting obligations.
5. Contact
To report a compliance concern or potential incident, email compliance@medcoresync.ai
OR write to:
- HIPAA Compliance Officer
- MedCoreSync AI, LLC
- 4432 Spring Mountain Lane
- Powder Springs, GA 30127