Our Care Center does not record PHI in the virtual platform. Documentation is completed in the EMR with the same privacy practices as in-office visits.
Virtual Visit Technical Process
Technology does not store or access PHI.
End-to-end encryption during the session.
Recording is disabled for patients and providers.
Access Authentication and Security Controls
Unique credentials, per-visit keys, and the ability for providers/admins to terminate sessions.
Audit Controls
Failed authentication attempts are logged and monitored.
Configuration changes are monitored and recorded.
Transmission Security
Application: TLS, SRTP, AES 128-bit encryption for signaling/media.