HIPAA and Our Products
Several Extrencity, Inc products create, receive, maintain, or transmit protected health information (PHI) on behalf of healthcare organizations: ReviewBox, Extrencity EHR, the Telehealth Platform, Transcription, and Scribe. Each of these products runs on infrastructure engineered for HIPAA compliance, with encryption in transit and at rest, access controls, and audit logging appropriate to PHI workloads.
BAAs With Customers
Where HIPAA requires it, Extrencity, Inc executes Business Associate Agreements with covered entities and with other business associates before PHI flows through a product. The BAA defines permitted uses of PHI, safeguard obligations, breach notification duties, and the handling of PHI when a relationship ends.
Subprocessor BAAs
Compliance does not stop at our own contracts. Extrencity, Inc maintains downstream BAAs with the cloud infrastructure vendors that host PHI-bearing workloads, so the chain of HIPAA accountability remains unbroken from your organization through our products to the underlying platforms.
About This Website
No PHI is collected, stored, or processed on this corporate website. It is an informational site only; PHI is handled exclusively within the individual products, under their own terms and executed BAAs.
Requesting a BAA
To request, review, or execute a Business Associate Agreement for any Extrencity, Inc product, reach our team through the contact form: Contact Us. Include your organization name and the product involved, and we will follow up with the appropriate agreement and next steps.