Policies

At Medicat, we value your privacy and respect your interest in knowing how information about you is collected and used. These policies describe how we collect, use, and disclose information that we gather about visitors to our website, www.medicat.com, and acceptable use of said website. These policies also outline your rights and choices regarding the information collected about you.

College Health EHR with Type 2 SOC 2 + HITRUST CSF

Medicat has made significant investments in its infrastructure and security framework. To substantiate that investment, Medicat has gone through the same third-party audit process as leading data centers in the country and has received Type 1 SOC 2 + HITRUST CSF, and Type 2 SOC 2 + HITRUST CSF Examinations.

HITRUST CSF provides healthcare a cybersecurity framework that covers both Federal and state regulations. HITRUST’s cybersecurity goals are to establish a complete baseline set of healthcare security controls. HITRUST delivers organizations with clear steps for compliance with healthcare security requirements.

HIPAA has no third party certifying body to allow an organization to certify that compliance standards are met. With HITRUST CSF organizations can affirm to its clients that the best practices recommended by HIPAA Security Rule, Controls Objectives for Information and Related Technology (COBIT), National Institute of Standards and Technology (NIST) Risk Management Framework, International Organization for Standards (ISO), Federal Trade Commission (FTC) Red Flags Rule, Centers for Medicare and Medicaid Services Addressable Risk Safeguards (CMS ARS), and Federal and State Regulations are being followed and can now be verified and audited by third parties. HITRUST CSF empowers an organization to demonstrate compliance by the third party. The Cybersecurity Framework protects Business Associate, Providers, Clinicians, Groups, and Patients.

A company that has performed Type 2 SOC 2 + HITRUST CSF Examination has proven its system is designed to keep clients’ sensitive data secure over time. When it comes to the cloud and related IT services, such performance and reliability are essential and required more often by regulators, examiners, and auditors.

The rigorous requirements of a Type 2 SOC 2 + HITRUST CSF Examination provide an unmatchable level of confidence, privacy, and security and demonstrate Medicat’s commitment to meeting these standards.

Acceptable Use Policy
This policy covers permissible and prohibited activities relating to content or data contained on Medicat’s website.

Privacy Policy
This policy describes how Medicat collects, uses, and discloses the personal and other information we gather from this website.

To EU Residents: Medicat processes your personal data in accordance with the EU data protection legislation, including national or international legislation implementing the EU Data Protection Directive (until superseded), the Privacy in Electronic Communications (“ePrivacy”) Directive (EU), and the General Data Protection Regulation (EU) 2016/679 (“GDPR”), as amended or superseded.

Last Updated: May 24, 2018