Every business that is part of the U.S. healthcare industry must comply with Federal standards regulating sensitive and private patient information. In addition to protecting worker health insurance coverage, HIPAA sets forth standards for protecting the integrity, confidentiality, and availability of electronic health information. Splashtop does not process, store, or have any access to any of the users’ computer data such as patient data or medical records. Therefore, Splashtop should not be considered as your business associate. While no single product or solution can make an organization HIPAA-compliant, the Splashtop Business Access, Splashtop Remote Support, Splashtop SOS, and Splashtop On-Prem products, when used properly, may help organizations fulfill HIPAA guidelines for the privacy and security of remote access to healthcare information and may be used within a larger system to support HIPAA compliance (see whitepaper below). Some key points to note are:
Splashtop transmits but does not store the encoded screen capture stream, which is encrypted end-to-end with TLS with AES-256 bit encryption.
The username / password transmission is encrypted with HTTPS / TLS.
The user passwords are encrypted and stored in our database, which is protected by encrypted disk and VPN.
All connections are logged with timestamp and user / device / session info.
Device authentication is enabled by default with an option to turn on 2-factor authentication.
Our Cloud security modules monitor and flag suspicious activities real-time and block the aggressor from further access to our Cloud services.
All of these measures should help ensure that Splashtop may be securely deployed in your organization without affecting HIPAA compliance.
White Paper: Splashtop HIPAA Compliance and Security
Splashtop also offers an on-premise implementation of its remote access and remote support solutions. With this implementation, all of the server modules / services are hosted in the customers’ private cloud. Please find more information at https://www.splashtop.com/products/on-prem and https://www.splashtop.com/solutions/iot (for remote support of computers, mobile / embedded / IoT devices) .
Please contact firstname.lastname@example.org to start a trial or get additional information.