Axero complies with HIPAA standards, securing communication and collaboration with all key stakeholders.
Medical records and protected health information (PHI) must be protected with utmost privacy. Axero is HIPAA-ready, and we sign a Business Associates Agreement (BAA) with our customers. Under the U.S. Health Insurance Portability and Accountability Act of 1996, a HIPAA business associate agreement (BAA) is a contract between a HIPAA-covered entity and a HIPAA business associate (BA). The contract protects personal health information (PHI) in accordance with HIPAA guidelines. Please note that Axero employees do not have access to any PHI data, nor does Axero require any PHI data for the functioning of its software. Axero provides an intranet platform, and it is the discretion of the customer to store the data on it. Axero makes sure that this data is protected as per the HIPAA guidelines.How your patients' information is protected
At Axero, building trusted long-term partnerships with our customers is our top priority. To earn the trust of our customers in healthcare and life sciences, and to protect the privacy of ePHI, Axero addresses the safeguards and requirements outlined by the HIPAA Security Rule.
SOC 2 Compliance and Data Backup and Recovery
Axero is SOC 2 compliant, and our AWS hosting environment facility is SSAE 16 (SOC 1, SOC 2 Type II) and ISO 27001 compliant. Axero is subject to extensive and continuous third-party network vulnerability scans, intrusion detection monitoring, and penetration tests. Plus, Axero offers complete backup and recovery services so your critical data stays safe, even when disaster strikes.
Secure Hosting and Encryption at Rest
Axero servers are hosted at SSAE 16 (SOC 1, SOC 2 Type II) and ISO 27001-compliant facilities. All data is encrypted at rest using AES-256 and AES-256 FIPS 140-2 Level 3.Plus, all connections to Axero are secured via SSL/TLS, so you're covered from every angle.
BAA Agreement
Axero will sign a BAA, which makes us joint custodians in the protection of patients' health information in accordance with the HIPAA guidelines. When dealing with healthcare communities, employees use privacy screens, so workstations are only visible to the people using them.
Audit Log Module
Axero Audit Log feature records user activity data, which can be accessed anytime to see the details of records added and edited. The feature helps to satisfy the following HIPAA control objectives:
Security Management Process §164.308(a)(1)(ii)(d) Implement procedures to regularly review records of information system activity, such as audit logs, access reports, and security incident tracking reports. Audit Controls §164.312(b) Implement hardware, software, and/or procedural mechanisms that record and examine activity in information systems that contain or use electronic protected health information. Document Retention §164.316(b)(2)(i) Retain the documentation required by paragraph (b)(1) of this section for 6 years from the date of its creation or the date when it last was in effect, whichever is later.
Security Management Process
§164.308(a)(1)(ii)(d)
Implement procedures to regularly review records of information system activity, such as audit logs, access reports, and security incident tracking reports.
Audit Controls
§164.312(b)
Implement hardware, software, and/or procedural mechanisms that record and examine activity in information systems that contain or use electronic protected health information.
Document Retention
§164.316(b)(2)(i)
Retain the documentation required by paragraph (b)(1) of this section for 6 years from the date of its creation or the date when it last was in effect, whichever is later.
1. Content (Article, Blog, Forum, Wiki, Photo, Video, Idea, CMS Page, File)
Add, Update, Rate, Like, Bookmark, Share, Delete
2. Content Comments
Add, Update, Like, Rate,
3. Cases & Tasks
Add, Update, Rate, Like, Move, Add Recipients, Assign, Delete
4. Events
5. Spaces
Add, Update, Update Permission, Delete
6. Users
Add, Update, Delete, Change Role, Login, Invalid Login, Forgot Password, Edit Profile, Change Password, Change Preferences
7. General Settings / Application SettingsUpdate of any setting. The individual setting change will not be recorded.
8. System PropertiesUpdate of any property. The individual setting change will be recorded.
9. Advanced System UtilitiesAny button click. The individual button click will be recorded.
10. System PermissionsUpdate of any permission. Only one event (System Permissions saved) will be recorded to change any of the system permissions.
11. Page Builder
Add, Update, Delete
12. Localization Resources
13. Upgrades to the softwareWhen the upgrade occurred to the new version/service pack.
is requesting access to a wiki that you have locked: https://my.axerosolutions.com/spaces/5/axero-documentation/wiki/view/85000/hipaa-compliance
Your session has expired. You are being logged out.