Security & Compliance
Protection for sensitive health data, built for home and community-based care.
- Built for HIPAA
- Data encrypted
- Access controlled
- Audit trail
Safeguards in the product
- Role-based accessEach person sees and does only what their role allows. Access is denied unless it is granted.How it works
- Separate data for every agencyEach agency works in its own space; one agency never sees the records of another.How it works
- Multi-factor sign-inSigning in takes a password and a second factor.How it works
- Automatic sign-outSessions end after a period without activity.How it works
- Encryption in transit and at restData is encrypted on its way to and from True Care System and where it is stored.How it works
- Audit trailViews of protected health information and changes to records are recorded.How it works
- BackupsDatabases are backed up automatically and can be restored to a point in time.How it works
Details
How each safeguard works
Role-based access
Every screen and action checks the person's role before it opens. A role that is not granted a permission cannot see or change that data.
Back to safeguardsSeparate data for every agency
Each agency's records are kept apart from every other agency's. A person signed in to one agency cannot reach another agency's records.
Back to safeguardsMulti-factor sign-in
On the web, people sign in with a password and a one-time code from an authenticator app. On the phone, an e-mailed code and a device key are used.
Back to safeguardsAutomatic sign-out
A session that stays idle ends on its own, so an unattended screen does not stay open.
Back to safeguardsEncryption in transit and at rest
Connections to True Care System use HTTPS. Databases and stored files are encrypted where they are kept.
Back to safeguardsAudit trail
Views of protected health information and changes to records are written to an audit trail. Security audit records are kept at least six years.
Compliance featuresBack to safeguardsBackups
Databases are backed up automatically and can be restored to a point in time.
Back to safeguardsSecure cloud hosting
True Care System runs on Amazon Web Services (AWS) in the US East (N. Virginia) region, us-east-1, under AWS’s Business Associate Addendum.
HIPAA
True Care System is built for HIPAA. A Business Associate Agreement is available for agencies that use the product. HIPAA has no certification program, so we never describe True Care System as certified for it.
State programs
Certified EVV and claims
True Care System is certified with Sandata for Pennsylvania Alternate EVV, and certified for PROMISe electronic claims (837P) and eligibility (270/271). Each state certifies its EVV vendors separately: ask us about your state and the transactions we support for your programs.
- Certified with Sandatafor Pennsylvania Alternate EVV
- Certified for PROMISeelectronic claims (837P) and eligibility (270/271)
Report a security concern
E-mail support@truecaresystem.com. Please do not include patient information.