Compliance and Security 
-
HIPAA
InstaMed is compliant with the Health Insurance Portability and Accountability Act of 1996 (HIPAA), which defines privacy and security guidelines and standards for the healthcare industry. As a clearinghouse, InstaMed is considered a covered entity under HIPAA.

EHNAC
InstaMed is the first company to achieve full accreditations with the Healthcare Network Accreditation Program (HNAP) and the Financial Services Accreditation Program (FSAP) from the Electronic Healthcare Network Accreditation Commission (EHNAC). The EHNAC HNAP accreditation recognizes excellence in health data processing and transactions, and indicates that accredited organizations exceed industry-established standards and comply with HIPAA regulations. The EHNAC FSAP accreditation demonstrates that an organization meets a high standard of quality in handling protected health information and follows industry-established criteria for processing payments.
-
PCI
InstaMed is certified as a Level One Service Provider with the Payment Card Industry (PCI) Data Security Standard, as well as the VISA Cardholder Information Security Program (CISP).
-
SSAE16 Type II Examination
InstaMed has completed the Statement on Standards for Attestation Engagements No. 16 Type II, “Reporting on Controls at a Service Organization.” These standards are issued and governed by the American Institute of Certified Public Accountants.
-
Trustwave
InstaMed is audited and scanned for PCI compliance by Trustwave, the leading provider of data security and compliance services to all businesses in the payment industry including acquirers, service providers, third-party providers and merchants. This includes regular onsite assessment, monthly vulnerability scans and penetration testing.
-
ScanAlert®
InstaMed is regularly scanned for vulnerabilities by ScanAlert® and is a member of their HACKER SAFE® program.
-
Thawte
InstaMed uses 128-bit SSL certificates from Thawte to provide trusted, secure eCommerce connectivity.
Secure, Redundant Data Centers
InstaMed operates state of the art secure, redundant, geographically dispersed data centers to provide superior levels of security and reliability.


