Storage Protection:

• Data is stored in a Data-warehousing server, which is in a secure room inside the work area. There is absolutely no access to the data-warehousing servers, both from internal and external networks.
  
  
• Data to the warehouse is transferred through a secure storage device.
  
  
• Data-warehousing room is accessible only by senior officials of the company, and authorized personnel who are required to carry or retrieve data from the warehouse.
  
  
• Protected Health Information is stored in the servers for 60 days, or as requested by the client. After this period the data is purged out and deleted from the servers.
  
  
• No physical / hard copies of Protected Health Information is made. If copies are made for specific quality control and audit purpose, we ensure to destroy the same through a paper shredder.

Data Security enforced by contracts:

• All employees of MEDIPHIL SCRIPTERS are required to sign a NON-DISCLOSURE AND DATA CONFIDENTIALITY AGREEMENT with the company.
  
  
• All other personnel who are likely to come in close contact with the protected Health Information are also required to sign the above agreement.
  
  
• Strict disciplinary procedures (including penalties, termination from service and legal action) are put in place for non-compliance and/or violation of the agreement.
  
  
• MEDIPHIL SCRIPTERS will sign a "Protected Health Information (PHI) agreement with the client, as required under HIPAA.