HIPAA Compliance

KeepTrack is designed to support compliance with the Health Insurance Portability and Accountability Act (HIPAA) and related healthcare privacy regulations. Our platform provides the technical and administrative safeguards required to protect Protected Health Information (PHI).

• Security management policies and periodic risk assessments
• Employee HIPAA training and awareness programs
• Role-based access policies and workforce controls
• Vendor security evaluations and third-party risk management

• End-to-end encryption of sensitive patient data
• Multi-factor authentication for all user accounts
• Role-based access controls limiting data access to authorized personnel
• Comprehensive audit logging of all system activity

• Secure cloud infrastructure hosted in SOC 2 certified data centers
• Restricted access to infrastructure systems and deployment pipelines
• Data center physical security controls and environmental protections

KeepTrack maintains a security incident response plan designed to detect, investigate, contain, and remediate potential security incidents promptly. Affected customers and regulators are notified within applicable timeframes.

We execute Business Associate Agreements (BAA) with all covered healthcare entities that store or process Protected Health Information through the KeepTrack platform.

Request a BAA

Healthcare organizations may request a signed BAA by contacting:

Under HIPAA §164.524, patients have the right to access their Protected Health Information within 30 days of a written request. KeepTrack provides the tooling for covered entities to fulfill these requests promptly and completely.

Clinic-Level Data Export

Clinic admins can export a complete record for any individual patient or their entire clinic's patient data at any time directly from the admin dashboard.

What's Included in Exports

• Patient demographics and identification
• Complete visit history and clinical notes
• Prescriptions and medication records
• Lab test orders and results
• Imaging and X-ray records
• Surgical procedures and outcomes
• Treatment records and care plans

All exports are generated in PDF format and are available directly from the admin dashboard with no additional configuration required.