The purpose of HIPAA is to protect confidential healthcare information through improved security standards and it defines certain requirements for storing patient information. It creates awareness and provides guidelines for risk analysis, training, suggests policies to perform audit trails, disaster recovery and validates access control and encryption.

To access Medsoft one has to pass through security checks at the entrance and without prior appointments visitors are not allowed. All visitors are logged in by name, purpose of visit, date and time. To prevent inappropriate access to our office permitted visitors are handed an identity pass, which has to be displayed on person at all times. As an additional security measure floppy drives and CD-ROM drives on every workstation have been removed. And we have in place security guards who patrol the premises around the clock.

Our File Management System software allows administrators to assign passwords and roles to individual users of our system. We monitor and log all activity of employees on our systems. Physical access to the various departments is constantly monitored and controlled by either electronic access or the "good old lock and key". Physical access to data servers and storage media is provided to a select few and senior management using a "double-key-safety deposit locker-system-method" to ensure high level of security. A close circuit video monitoring system with security cameras is being implemented.

Electronic Data communication and Security

All communications between our office and our clients’ systems are done by VPNs’ connections using either CheckPoint, SonicWall and or Safe-Net software and via (secure-socket-layers) SSL connections using 128-bit encryption. Data communicated between our "fire-walled-Intranet" and the Internet is through application level secure access that ensures privacy and integrity over the Internet and protects data being transferred from eavesdropping, tampering, and spoofing. Utilizing stateful packet inspection, the most effective method of packet filtering, Medsoft’s local network is protected from hackers and vandals on the internet.