HIPAA and Information Security

Medical billing requires access to protected health information (PHI). This page explains how we approach that responsibility and what you can expect from us.

Our approach

When we provide billing or revenue cycle services that involve PHI, we act as a business associate of your practice under the Health Insurance Portability and Accountability Act (HIPAA). We put a written Business Associate Agreement (BAA) in place with each client before we access patient information.

Safeguards we apply

• Minimum necessary access. Team members access only the information needed for their assigned work.
• Access you control. We work inside your systems using individual user accounts that your practice can grant, review, and revoke.
• Secure exchange. Patient information is shared through secure systems agreed during onboarding, not through ordinary email or website forms.
• Workforce awareness. Team members who handle PHI are expected to complete privacy and security training.
• Incident handling. Suspected security incidents are investigated and reported as required by the BAA and applicable law.

This website

This website is for business inquiries only and is not designed to receive PHI. Please do not submit patient information through its forms or by email. The site is served over HTTPS, and form submissions are delivered to our business inbox.

An important note on compliance

HIPAA compliance is an ongoing responsibility shared by covered entities and their business associates. It is not established by a certificate, a website badge, HTTPS, a privacy policy, or a BAA alone. There is no official government "HIPAA certification." We are happy to discuss our safeguards in detail during your consultation and to answer your security questionnaire.

Questions

For questions about how we handle information, contact info@primevisionrevenue.com.