HIPAA Compliance

eCourtDate enables officers, caseworkers, and health providers to communicate effectively with clients while maintaining HIPAA compliance. The platform includes safeguards to protect Protected Health Information (PHI) across all communication channels.

PHI Protection Measures

• Automatic PHI removal: Protected health information is automatically stripped from outgoing messages
• Backend anonymization: The API automatically anonymizes PHI data before processing
• Role-based access: PHI data access is restricted based on user role and permissions
• Multi-factor verification: MFA is required when unlocking PHI data within the application
• Activity logging: Exportable access logs record all user activity involving PHI
• Session management: Users are automatically logged off after periods of inactivity

Secure Document Exchange

Send and receive secure, trackable documents through the integrated Portal. All document transfers are encrypted end-to-end and hosted in AWS GovCloud.

Consent and Enrollment

Send integrated consent, intake, and enrollment forms to ensure proper authorization before PHI is transmitted or accessed.

Encryption

All data is encrypted end-to-end using FIPS 140-3 validated cryptographic modules and hosted in AWS GovCloud, an isolated U.S. region designed for sensitive government workloads.

For HIPAA compliance questions, contact info@ecourtdate.com.