INTRODUCTION
The Health Insurance Portability and Accountability Act (including the Privacy Rule, Security Rule, Breach notification Rule, and Health Information Technology for Economic and Clinical Health Act) ("HIPAA"), requires Covered Entities and Business Associates to take certain measures to protect health information that can identify an individual. It also provides certain rights to individuals. Zoho does not collect, use, store or maintain health information protected by HIPAA for its own purposes. However, PDF Editor provides certain features (as described below) to help its customers use PDF Editor in a HIPAA compliant manner.
HIPAA requires Covered Entities to sign a Business Associate Agreement (BAA) with its Business Associates. You can request our BAA template by sending an email to legal@zohocorp.com.
PDF Editor, as it a part of Zoho WorkDrive which is compliant with the HIPAA regulations, meets all the necessary HIPAA guidelines.
HIPAA compliance in PDF Editor
PDF Editor provides the following features for all the users to use PDF Editor in a HIPAA compliant manner.
Document Content
The content present or added in a PDF document, including comments, would be ePHI.
Control access for collaborators
User specific permission > Share files with individual colleagues or a group of collaborators while retaining control of your document. Permission levels can be set as follows; Read Only, Read/Comment, Read/Write, Co-owner or Read/Fill.
Review the collaborators status in the document > You can view the status of each collaborator and see who has viewed, yet to view, or is active in the document.
Auto file Backup
Version History > Version history helps you keep track of all of the edits that were made in your document. You can see what has changed over time, easily.
Publish with restrictions
You can publish documents inside or outside your organization via Zoho WorkDrive. When you publish a document, a link will be generated which you can use to share your document and embed it in websites or blogs.
Data Encryption
Data is encrypted during transit and encryption at rest by default for content written in PDF Editor. The data encryption details at Zoho are available here.