Designed to support HIPAA-compliant hospital workflows.

CodeDark Health does not represent itself as HIPAA certified. We design and evaluate our product and deployment practices with administrative and technical safeguards intended to support our customers’ HIPAA obligations. Compliance depends on the customer’s use, configuration, policies, risk analysis and contractual arrangements.

What hospitals should review

• The minimum necessary information and role permissions for each downtime workflow.
• Authentication, device authorisation, physical safeguards and workforce procedures.
• Encryption, logging, retention and recovery requirements appropriate to the deployment.
• Business Associate Agreement availability and each party’s responsibilities.
• Incident-response, breach-notification and vendor-management processes.

Privacy and data governance

Before deployment, hospitals should establish approved data flows, retention periods, access-review schedules, reconciliation procedures and contact paths for privacy and security events. CodeDark will work with customers through the applicable review process and provide accurate, current product information for that review.

Review security architecture · Read the privacy policy · Request a security discussion