The Health Insurance Portability and Accountability Act (including the Privacy Rule, Security Rule, Breach Notification Rule, and Health Information Technology for Economic and Clinical Health Act) ("HIPAA"), requires Covered Entities and Business Associates to take certain measures to protect health information that can identify an individual. It also provides certain rights to individuals. Zoho Learn does not collect, use, store or maintain health information protected by HIPAA for its own purposes.  However, Zoho Learn provides certain features (as described below) to help its customers to use Zoho Learn in a HIPAA compliant manner. 

HIPAA requires Covered Entities to sign a Business Associate Agreement (BAA) with its Business Associates. You can request our BAA template by sending an email to legal@zohocorp.com.

ePHI

Data stored in Articles/Lessons in Zoho Learn is marked as ePHI and are encrypted. We don't consider quizzes, question banks, topics or questions under a question bank, assignments and the title and the short description of your articles/lessons as ePHI. In addition to this, all your data is Encrypted at Transit and Rest and only members with whom data is shared can view it.

Audit Trail

The audit trail allows you to keep a track of activities in your hub. You can do that with the Activity/Notifications in Zoho Learn. Admins can see the audit log of all users in Settings. The audit trails will be stored for a period of 6 years. Click here to check the actions covered in the audit log.