HIPAA Procedures

The Gold Standard of Medical Privacy

At Alphatic Labs, we treat data security not just as a legal requirement, but as a core product feature. Our infrastructure is built from the ground up to exceed HIPAA and GDPR standards.

Technical Safeguards

• Encryption at Rest: All patient data is stored using AES-256 bit encryption.
• Encryption in Transit: Every bit of data moving between your device and our servers is protected by TLS 1.3 (SSL).
• Automated Logouts: Sessions automatically expire after periods of inactivity to prevent unauthorized access at physical workstations.
• Database Isolation: We use a multi-tenant architecture with Row-Level Security (RLS), ensuring no organization can ever see another's data even at the database layer.

Administrative Safeguards

• Granular Audit Trails: Every time a patient record is viewed, edited, or printed, a permanent, tamper-proof log entry is made. Administrations can review these logs anytime.
• Role-Based Access Control (RBAC): Ensure your receptionist cannot see clinical notes and your dental assistants cannot see financial reports.
• Workstation Tracking: Monitor which IP addresses and devices are accessing your clinic dashboard.

HIPAA-Compliant Video Consultations

Our built-in Tele-health module is fully peer-to-peer and encrypted, ensuring your video calls are never recorded on our servers.

Responsibilities of the Clinic

While Alphatic provides the secure platform, your clinic must follow internal SOPs:

• Do not share login credentials among staff.
• Ensure all clinic computers have updated antivirus software.
• Only share patient info through the secure Alphatic Patient Portal.