Healthcare groups searching for a hosting resolution might identify Liquid Web being a possible seller, but is Liquid Web Health Insurance Portability and Accountability Act (HIPAA) compliant?
Can its cloud services be utilized by HIPAA-protected entities for hosting projects and applications that include electronic protected health information (ePHI)?
Any healthcare organization that wishes to use the cloud to host apps that use the PHI of patients should select a seller whose service includes safety measures to make sure the integrity, confidentiality, and availability of ePHI that meet the necessities of the HIPAA Security Law.
Cloud service suppliers, including hosting companies, are classified as business associates (BAs) because they possibly have access to their clients’ information. While several cloud service providers assert they don’t access customers’ data, they are still classed as BAs. HIPAA-protected entities and their BAs should, therefore, enter into a Business Associate Agreement (BAA) with the service provider prior to any ePHI is uploaded to the cloud.
Liquid Web BAAs
Liquid Web has been offering hosting solutions to SMBs for 20 years. The previous year, the firm went through an independent check of its hosting facilities to evaluate compliance with HIPAA/HITECH laws. While there isn’t any certified HIPAA compliance documentation, the accounting firm UHY LLP certified that the firm has implemented appropriate physical, administrative, and technical safeguards to satisfy HIPAA Laws. Liquid Web has also qualified Swiss-US and EU-US Privacy Shield audits, PCI Service Provider recertification and SOC 1, 2, 3 attestations.
Liquid Web is ready to sign BAAs with HIPAA protected units that need hosting facilities for web content as well as apps that include Protected Health Information. The Business Associate Agreement covers its single server as well as several server hosting facilities.
Is Liquid Web HIPAA Compliant?
The security and privacy controls applied by Liquid Web let HIPAA protected entities to make sure their data is safe and always available. Liquid Web can be a HIPAA compliant hosting facility, provided security, access, and audit controls are set properly and a signed BAA is completed before use of the hosting facilities in connection with any ePHI.