1. Protection of PHI

We implement safeguards to protect Protected Health Information (PHI) from unauthorized access, disclosure, or misuse.

• Secure storage of patient records
• Controlled access to sensitive information
• Confidential handling of medical data

2. Administrative Safeguards

We establish internal policies and procedures to ensure proper handling of healthcare data.

• Defined roles and responsibilities
• Staff training on data privacy
• Access management protocols

3. Technical Safeguards

We use advanced technical controls to secure electronic health data.

• Encryption of data in transit and at rest
• Secure user authentication
• System activity monitoring and logging

4. Physical Safeguards

We ensure that physical access to systems and infrastructure is controlled and monitored.

• Secure data centers
• Restricted access to hardware
• Environmental protection systems

5. Compliance Responsibility

While Curofyx supports HIPAA-aligned practices, healthcare providers using the platform are responsible for ensuring their own compliance with applicable regulations.