We are not a HIPAA-certified application; however, we have gone to great lengths to meet their level of privacy standards for security and data protection. All data connections to our servers are protected and encrypted, including our Family Portal, timecard entry through telephony & mobile GPS, iPhone app, and main system app. The ADLware application times out after 30 minutes of inactivity and requires a new login to continue.
Our data centers are protected by armed guards, and all data is backed up hourly and shipped offsite daily. In the event of a disaster, our failover data center will come online within 4 hours of a disaster.
One HIPPA requirement we chose not to implement was the 30-day password expiration. We have found that this tends to reduce security because as users struggle to remember a constantly changing password, they tend to write it down, which increases vulnerabilities. However, this requirement can be managed through your business process, allowing you to be HIPAA compliant and still use our software platform.