Enable HIPAA Compliance in a Profile

HIPAA (Health Insurance Portability and Accountability Act of 1996) establishes standards for accessing, storing, and transmitting medical data securely. Enabling HIPAA compliance in WhatConverts ensures that all lead and call data is encrypted, access is logged, and notifications containing potential Protected Health Information (PHI) are automatically sanitized.

Enable HIPAA Compliance

To enable HIPAA compliance for a profile:

1. Log in to your account and open the Control Center.
2. Open the Profile Settings, Click "HIPAA".
3. Review the HIPAA overview explaining the controls applied when enabled:
   • Data is encrypted at rest and in transit.
   • Webhooks to unsecured URLs are disabled.
   • Email notifications have PHI removed.
   • Users are logged out automatically after 15 minutes of inactivity.
   • All access to PHI is logged for compliance.
4. Under Enable HIPAA, click "Contact Us" to request activation.
5. Provide the following information to the WhatConverts team:
   • Full Company Name
   • Privacy Officer's First Name
   • Privacy Officer's Last Name
   • Privacy Officer's Email Address
6. Once your Business Associate Agreement (BAA) is executed, the WhatConverts team will activate HIPAA compliance for your profile.
7. Click "Update HIPAA" to finalize and confirm the setting.