COMPLIANCE AND SECURITY
Healthcare Industry Compliance
HIPAA
InstaMed is compliant with the Health Insurance Portability and Accountability Act of 1996 (HIPAA), which defines privacy and security guidelines and standards for the healthcare industry. As a clearinghouse, InstaMed is considered a covered entity under HIPAA.
EHNAC
InstaMed is compliant and accredited by the Electronic HealthCare Network Accreditation Commission (EHNAC), which establishes criteria for measuring performance of clearinghouses and value-added networks. In Maryland and New Jersey, EHNAC accreditation is required of any entity processing healthcare transactions on behalf of healthcare organizations located in those states. EHNAC has also been properly authenticated and registered with the Office of the United States Attorney General and Federal Trade Commission as an entity that is capable and qualified to develop and measure national standards of healthcare clearinghouse HIPAA privacy and security.
Financial Industry Compliance
PCI
InstaMed is certified as a Level One Service Provider with the Payment Card Industry (PCI) Data Security Standard, as well as the VISA Cardholder Information Security Program (CISP).
Ambiron TrustWave
InstaMed is audited and scanned for PCI compliance by Ambiron TrustWave, the leading provider of data security and compliance services to all businesses in the payment industry including acquirers, service providers, third-party providers, and merchants. This includes regular onsite assessment, monthly vulnerability scans, and penetration testing.
ScanAlert™
InstaMed is regularly scanned for vulnerabilities by ScanAlertT and is a member of their HACKER SAFEŽ program.
Security
Thawte
InstaMed uses 128 bit SSL certificates from Thawte to provide trusted, secure eCommerce connectivity.
Secure, Redundant Data Centers
InstaMed operates state of the art secure, redundant, geographically dispersed data centers to provide superior levels of security and reliability.