HIPAA
We sign a Business Associate Agreement before handling your facility’s protected health information.
It sets out permitted uses, data-security responsibilities and breach-notification obligations.
Discuss your BAATrust &
security
Patient information needs protection throughout the reading process. See how Natoe safeguards your data, controls access and meets its responsibilities to your facility.
Standards your team
can evaluate
SOC 2 Type I
Our security controls have undergone an independent SOC 2 Type I examination.
Review the report’s scope and assessment date with our team as part of your vendor evaluation.
Request audit informationProtecting the information
you entrust to us
Encrypted data
TLS 1.3 protects information in transit. AES-256 encryption protects stored studies and records.
Controlled access
Role-based permissions limit access according to the work each person needs to do.
Recorded activity
Access logs provide a record of activity involving patient information.
Agreed retention
Data retention and handling responsibilities are defined in your facility agreement.
Clinical responsibility
stays with our readers
Our U.S. board-certified radiologists hold active licences for the states they serve. They interpret the images and sign the report.
Meet our clinical leadershipAI within its intended use
FDA-cleared AI algorithms support detection on applicable studies. The radiologist reviews their findings alongside the images.
Follow-up stays with the case
Clinical questions, report corrections and addendum requests remain attached to the original study for the reading team to assess.
Before we work together
What can our security team review?
Start with your vendor questionnaire or the requirements you need to assess. We can discuss the BAA, SOC 2 Type I documentation, encryption, access controls and data-retention terms.
What does SOC 2 Type I cover?
A Type I examination assesses the design of controls at a specified point in time. Our team can discuss the scope, assessment date and available documentation with you.
When is the BAA signed?
Before Natoe handles your facility’s protected health information. Security and contractual responsibilities are addressed during onboarding.
Questions about
trust and security?
Talk with our team about the information you need to evaluate Natoe.