For clinics
Protecting health information
ekco supports clinics that handle protected health information. We protect information under our agreements with clinics and applicable law.
What we put in place
Our security and privacy practices are designed to support responsible clinic use.
A Business Associate Agreement
A Business Associate Agreement must be in place before protected health information is processed.
Safeguards
We maintain administrative, physical, and technical safeguards designed to protect information.
Clinic oversight
Your clinic remains responsible for consent, patient communications, and clinical decisions.
Questions clinics ask
- How does ekco protect health information?
- We handle health information under a Business Associate Agreement and maintain safeguards designed to protect it. See Trust and Data & Privacy for an overview.
- Do we need patient consent?
- Yes. Your clinic must obtain and document consent as required by applicable law. Patients may opt out at any time.
- Is Ekco Health SOC 2 certified?
- SOC 2 Type II is underway. We can share where the program stands and walk your team through our controls. Reports go to customers under NDA when available.