The Health Insurance Portability and Accountability Act (HIPAA), including the Privacy Rule, Security Rule, Breach Notification Rule, and the Health Information Technology for Economic and Clinical Health (HITECH) Act, establishes requirements for protecting health information that can identify an individual.
Zoho does not collect, use, store, or maintain protected health information (PHI) for its own purposes. However, Zoho ChemStudio provides security features that can help customers, including pharmaceutical companies, clinical research organizations, and healthcare-related laboratories, use the product in support of their HIPAA compliance requirements.
HIPAA requires Covered Entities to enter into a Business Associate Agreement (BAA) with their Business Associates.
If your organization requires a BAA with Zoho, you can request our BAA template by contacting legal@zohocorp.com.
Any information entered into Zoho ChemStudio, including molecular structures, compound records, formulation notes, experimental annotations, and other research data, may constitute electronic Protected Health Information (ePHI) when associated with identifiable patients or research participants.
Organizations are responsible for ensuring that such information is handled in accordance with their HIPAA obligations.
ChemStudio includes security features that help organizations manage access to their data, including:
These controls help organizations limit access to authorized users and support their internal security policies.
ChemStudio protects customer data using industry-standard security practices, including encryption of data in transit and at rest, secure key management, and controlled access to stored data.
For more information, see our Encryption documentation.
HIPAA compliance is a shared responsibility between Zoho and your organization. While ChemStudio provides security features that help protect your data, your organization is responsible for configuring appropriate access controls, determining what information is stored in ChemStudio, and ensuring compliance with applicable HIPAA requirements.
The information provided on this page is for informational purposes only and should not be considered legal advice. We recommend consulting qualified legal or compliance professionals to determine how HIPAA applies to your organization and its use of Zoho ChemStudio.