HIPAA Compliance
Last updated: February 24, 2026
Patient data security is our top priority. Caristeo is built from the ground up to exceed HIPAA compliance standards.
End-to-End Encryption
All data is encrypted in transit (TLS 1.3) and at rest (AES-256).
Secure Infrastructure
Hosted on HITRUST certified servers with 24/7 monitoring.
BAA Agreement
We sign a Business Associate Agreement (BAA) with all Enterprise customers.
Access Control
Two-factor authentication (2FA) and detailed audit logs.
What is HIPAA?
The Health Insurance Portability and Accountability Act (HIPAA) sets the standard for sensitive patient data protection. Companies that deal with protected health information (PHI) must have physical, network, and process security measures in place and follow them to ensure HIPAA Compliance.
Our Responsibility
As your technology partner, we take responsibility for the technical security of the data you entrust to us. We conduct regular security audits, penetration testing, and compliance training for our entire team.
Your Responsibility
While we provide a secure platform, HIPAA compliance is a shared responsibility. You are responsible for ensuring your staff uses strong passwords, does not share credentials, and keeps physical devices secure.
Need a signed BAA?
For customers on Pro and Enterprise plans, we can provide a signed Business Associate Agreement (BAA) upon request.
Request BAA