Book a meeting

How does Zoho Creator support HIPAA compliance?

Estimated reading: 3 minutes 305 views

HIPAA, the Health Insurance Portability and Accountability Act, along with its Privacy Rule, Security Rule, Breach Notification Rule and the HITECH Act, requires covered entities and business associates to protect individually identifiable health information and gives individuals rights over their own health data. Zoho Creator does not collect, use, store or maintain health information for its own purposes, but it provides features that let you build and manage HIPAA compliant applications on the platform.

How Zoho Creator supports HIPAA compliance

Labelling fields as ePHI

You can label specific fields as containing electronic Protected Health Information (ePHI) if they store data that identifies an individual’s health information.

  1. Open the form builder.
  2. Select the target field.
  3. In the Field Properties panel, go to Data Security.
  4. Tick Contains health info (ePHI).

Encrypting ePHI data

Encryption adds a layer of protection so sensitive data can only be read by authorised parties. Zoho Creator lets you encrypt fields that contain health information.

Managing roles and permissions

Admins have fine grained control over user access to applications and data, including:

  • Adding and managing users.
  • Creating custom permission sets at module, record, feature and field level.
  • Defining roles and hierarchical structures.
  • Setting up data sharing rules.
  • Enforcing domain restrictions.

Audit trails and export logs

The Audit Trail feature monitors and logs user activity, including changes made to records, and report export and print actions.

Retention periods:

  • Record change logs: retained for 1 year.
  • Export and print logs: retained for 3 months.

Audit logs can be exported as CSV files for internal archiving. It is the covered entity’s responsibility to protect and manage exported logs in line with HIPAA retention rules.

Backup and restore

Zoho Creator supports scheduled application backups, including associated data, with the ability to restore them if needed. You can:

  • Configure backup frequency.
  • Set start dates for scheduled backups.
  • Restore from previous snapshots if data is lost.

Secure third party integrations

Zoho Creator supports secure integrations with third party services. Data transmitted during these integrations is encrypted in transit and managed in line with HIPAA guidelines.

Frequently asked questions

Does Zoho Creator store health data itself?

No. Zoho Creator does not collect, use, store or maintain health information protected under HIPAA for its own purposes, but it gives customers the tools to build compliant applications.

How long are audit trail logs kept in Zoho Creator?

Record change logs are retained for 1 year, and export or print logs for 3 months.

Need help?

Need help building HIPAA compliant applications in Zoho Creator? Contact support@thoughtlogik.com or see our Zoho custom app development services.

How does Zoho Creator support HIPAA compliance? - PreviousZoho Creator HIPAA Compliance GuideNext - How does Zoho Creator support HIPAA compliance?Web accessibility and WCAG compliance

Leave a Reply

Your email address will not be published. Required fields are marked *

Learn how we helped 100 top brands gain success

Subscribe

×
Cancel