parallax background

HIPAA Smart Security, Compliant Cloud

Only ArexCloud guarantees that all of our solutions meet HIPAA Compliance Guidelines

In today’s world, HIPAA compliant cloud hosting requires vigilance. Arex is in your corner, working to ensure your sensitive patient information is kept in utmost confidence, protected from exposure and inadvertently falling into the wrong hands.

Healthcare Data Security | Compliance

3rd Party Audited for HIPAA Compliance

ArexCloud has completed a 3rd party audit through one of the most recognized and rigorous HIPAA auditing programs. This audit verifies that ArexCloud is compliant in HIPAA, HITECH, and OMNIBUS rules. Being HITECH and HIPAA Compliant requires continuous updates to policies and procedures and is an ongoing process. By ensuring that ArexCloud is HIPAA Compliant, our customers can be assured that all of the solutions we provide follow these same strenuous guidelines. For more information on our audit, feel free to verify our current status.

HIPAA Requirement Feature

Offsite Backups
HIPAA compliant server requires full backups of data to a separate facility other than the data center.
PHI Encryption
Electronic PHI is encrypted as regulated by the HIPAA Security Rule to meet standards in accordance with HIPAA Compliance. This process is used as a safeguard for risk management to protect the data contained within. Under HIPAA compliancy guidelines, PHI data must be encrypted both at rest and in transit. Your data stored in the cloud is encrypted with AES-256 symmetric cryptography and your data in transit is encrypted with an RSA 2048 bit key. Read more about encrypting HIPAA data.
Security Information and Event Management (SIEM)
The Server Log Management function indexes server logs and creates a searchable index for log file analysis or log auditing. HIPAA compliant cloud hosting guidelines require log collection.
Host Intrusion Detection System (HIDS)
Monitors log activity and sends email alerts to the system administrator when an anomaly is detected. HIDS automatically adds firewall rules to block the source of any anomaly.
Web Application Firewall (WAF)
Blocks and monitors network traffic at the application level. Rule customization and advanced security features protect applications and services. The web application firewall (WAF) complements a physical firewall. Whereas a physical firewall allows traffic through HTTP and HTTPS, the WAF filters attacks to stay within the HIPAA compliant web hosting guidelines.
Two-Factor Authentication
A method of authentication that is more secure than using a simple password alone. It employs the use of a second factor that adds to the complexity of the user authentication.
Business Associate Agreement
Provides assurance that HIPAA Compliant data will be safeguarded and protected by an entity that provides services for a HIPAA Compliant organization. The Business Associate Agreement must be provided in writing to the covered entity.
Vulnerability Assessment Scans
Run regular vulnerability assessment scans in order to reveal any weakness in security that should be remedied.
Password Management
Manage password policies to ensure they are being changed on a regular basis and they are complex enough to meet the security policies.

3rd Party Audited for HIPAA Compliance.

Contact Arex
TeleHealth

Telehealth is the use of communications technologies to provide health care from a distance. These technologies may include computers, cameras, videoconferencing, the Internet, and satellite and wireless communications. Some examples of telehealth include

Benefits and Potential Uses of Telehealth

Telehealth services can facilitate public health mitigation strategies during this pandemic by increasing social distancing. These services can be a safer option for HCP and patients by reducing potential infectious exposures. They can reduce the strain on healthcare systems by minimizing the surge of patient demand on facilities and reduce the use of PPE by healthcare providers.

Maintaining continuity of care to the extent possible can avoid additional negative consequences from delayed preventive, chronic, or routine care. Remote access to healthcare services may increase participation for those who are medically or socially vulnerable or who do not have ready access to providers. Remote access can also help preserve the patient-provider relationship at times when an in-person visit is not practical or feasible.

Getting care at home, especially for people who can't easily get to their providers' offices

Getting care from a specialist who is not close by

Getting care after office hours

More communication with your providers

Better communication and coordination between health care providers

More support for people who are managing their health conditions, especially chronic conditions such as diabetes

Lower cost, since virtual visits may be cheaper than in-person visits

TeleHealth