Skip to main content

What is NexHealth's legal and security compliance status?

NexHealth is HIPAA and SOC 2 compliant, ensuring strong safeguards for your patients' personal health information.

Updated over a week ago

Overview

We understand that protecting your patients' data is of the utmost importance. NexHealth is committed to maintaining the highest standards of security and legal compliance.

For a comprehensive look at our security practices, please visit the NexHealth Security Portal.

HIPAA Compliance

NexHealth is fully compliant with the Health Insurance Portability and Accountability Act (HIPAA). This framework ensures we have strong administrative, technical, and physical safeguards in place to protect personal health information (PHI).

SOC 2 Compliance

We are also SOC 2 compliant. We securely manage your data to protect the interests of your organization and the privacy of your patients.

A Note on PHIPA (Ontario, Canada)

The Personal Health Information Protection Act (PHIPA) is a privacy law specific to the province of Ontario.

  • While NexHealth is not formally PHIPA certified, our existing HIPAA and SOC 2 controls and policies align with PHIPA’s core principles.

  • We are happy to provide supporting documentation or a mapping of our HIPAA and SOC 2 controls to PHIPA upon request.

Did this answer your question?