Book a callSecurity and privacy
How ApexRev handles patient information.
Patient information is the most sensitive thing a clinic holds. Here is how ApexRev handles it, stated plainly.
- Business Associate Agreement
- Encrypted in transit and at rest
- Role-based access
- Audit logging
A Business Associate Agreement before data connects
Your clinic signs a Business Associate Agreement with us before any patient data is connected. Your clinic remains the covered entity; we act on your instructions.
Encrypted in transit and at rest
Patient data is encrypted when it moves and when it is stored.
Separated environments
Each clinic's data is kept separate, with access limited to the people and services that need it.
Role-based access, fully audited
Owners, office managers, coordinators and front desk each see exactly what their job requires. Every access and action is logged — who saw what, and when.
Your data stays yours
We never sell your data. Your patient records exist in ApexRev to serve your clinic, and only your clinic.
Works with your EHR
Where your EHR supports it, ApexRev reads from it rather than replacing it. Your EHR stays the record of care.
Questions about how we handle data? Email [email protected].
Where patient data goes.
Your clinic signs a Business Associate Agreement with us before any patient data is connected, and remains the covered entity. Data is encrypted in transit and at rest, access is role-based and logged, and the service providers we use are listed in the agreement.
Questions about how we handle personal information? Email [email protected].
Continue reading
The next step
See what ApexRev would change in your clinic.
$10,000 in new revenue, or you don't pay.