[{"data":1,"prerenderedAt":516},["ShallowReactive",2],{"help-page-en-privacy":3,"help-articles-en-privacy":157},{"page":4,"fallback":156},{"id":5,"title":6,"body":7,"description":145,"extension":146,"meta":147,"navTitle":6,"navigation":148,"path":149,"seo":150,"slug":151,"sourceFile":152,"stem":153,"type":154,"__hash__":155},"helpPages\u002Fhelp\u002Fprivacy.md","Privacy & Security",{"type":8,"value":9,"toc":135},"minimark",[10,14,17,22,25,54,62,64,68,71,79,81,85,88,95,97,101,112,117,119,123,130],[11,12,13],"p",{},"HiBoop is built with a privacy-first architecture. All patient health information is encrypted in transit and at rest, and access is strictly controlled through role-based permissions.",[15,16],"hr",{},[18,19,21],"h2",{"id":20},"hipaa-compliance","HIPAA compliance",[11,23,24],{},"HiBoop is designed to support HIPAA-compliant workflows for U.S.-based healthcare organizations. This includes:",[26,27,28,36,42,48],"ul",{},[29,30,31,35],"li",{},[32,33,34],"strong",{},"Business Associate Agreement (BAA)",", available to all clinics on request",[29,37,38,41],{},[32,39,40],{},"Role-based access controls",", staff only see what their role permits",[29,43,44,47],{},[32,45,46],{},"Audit logging",", every patient data access event is recorded with timestamp and user",[29,49,50,53],{},[32,51,52],{},"Encrypted storage and transmission",", TLS in transit, AES-256 at rest",[11,55,56,57,61],{},"Contact ",[58,59,60],"code",{},"support@hiboop.com"," to request your BAA.",[15,63],{},[18,65,67],{"id":66},"how-hiboop-protects-patient-data","How HiBoop protects patient data",[11,69,70],{},"HiBoop uses layered security controls: TLS 1.2+ for all data in transit, AES-256 encryption at rest, automatic session timeouts after inactivity, and infrastructure that follows SOC 2-aligned practices. Multi-factor authentication is available for all staff accounts.",[11,72,73,74],{},"See ",[75,76,78],"a",{"href":77},"\u002Fhelp\u002Fprivacy\u002Fdata-protection\u002F","How does HiBoop protect patient data?",[15,80],{},[18,82,84],{"id":83},"data-sharing-policy","Data sharing policy",[11,86,87],{},"HiBoop does not sell or share patient data with third parties for advertising, analytics, or any commercial purpose. Data is processed solely to deliver the HiBoop service to your clinic. De-identified aggregate data is never sold.",[11,89,73,90,94],{},[75,91,93],{"href":92},"\u002Fhelp\u002Fprivacy\u002Ffaq\u002F","Privacy & Security FAQ"," for details on data sharing, subprocessors, and legal documents.",[15,96],{},[18,98,100],{"id":99},"your-privacy-rights","Your privacy rights",[11,102,103,104,106,107,111],{},"Patients and clinic administrators have rights over the data HiBoop holds, including the right to access, correct, export, or delete records. To submit a data rights request, contact ",[58,105,60],{}," or reach out through ",[75,108,110],{"href":109},"\u002Fcontact\u002F","hiboop.com\u002Fcontact\u002F",".",[11,113,73,114,116],{},[75,115,93],{"href":92}," for details on access, portability, and erasure requests.",[15,118],{},[18,120,122],{"id":121},"terms-of-service-privacy-policy","Terms of service & privacy policy",[11,124,125,126,111],{},"HiBoop's full legal documents, including the Privacy Policy, Terms of Service, and BAA template, are available at ",[75,127,129],{"href":128},"\u002Flegal\u002F","hiboop.com\u002Flegal\u002F",[11,131,73,132,134],{},[75,133,93],{"href":92}," for a guided walkthrough of the key provisions.",{"title":136,"searchDepth":137,"depth":137,"links":138},"",3,[139,141,142,143,144],{"id":20,"depth":140,"text":21},2,{"id":66,"depth":140,"text":67},{"id":83,"depth":140,"text":84},{"id":99,"depth":140,"text":100},{"id":121,"depth":140,"text":122},"Learn how HiBoop protects patient data, maintains HIPAA compliance, and handles your privacy rights and data requests.","md",{},true,"\u002Fhelp\u002Fprivacy",{"title":6,"description":145},"privacy",null,"help\u002Fprivacy","helpPage","37csHePjmdsHYJiJKrtSwJ3WKSWEZhiTBNNUnKtom_I",false,[158,364],{"id":159,"title":78,"body":160,"category":151,"categoryTitle":6,"description":152,"extension":146,"meta":356,"navigation":148,"path":357,"seo":358,"slug":359,"sourceFile":152,"stem":360,"subcategory":152,"subcategoryTitle":152,"type":361,"updatedAt":362,"__hash__":363},"helpArticles\u002Fhelp\u002Farticles\u002Fdata-protection.md",{"type":8,"value":161,"toc":350},[162,169,175,179,182,199,206,210,294,298,318,322],[11,163,164,165,168],{},"HiBoop is designed with a ",[32,166,167],{},"privacy-first architecture"," to safeguard sensitive health information. We follow stringent protocols to ensure all data is secure, accessible only by authorized users, and compliant with relevant privacy regulations.",[170,171,172],"blockquote",{},[11,173,174],{},"All assessment responses are stored securely and only accessible to authorized users within your clinic. Your patients’ data belongs to them, and to you as their care provider. HiBoop simply helps you handle it responsibly.",[18,176,178],{"id":177},"compliance-standards","Compliance standards",[11,180,181],{},"HiBoop complies with:",[26,183,184,190,196],{},[29,185,186,189],{},[32,187,188],{},"HIPAA"," (United States)",[29,191,192,195],{},[32,193,194],{},"PIPEDA \u002F PHIPA"," (Canada)",[29,197,198],{},"Additional international standards, where applicable",[11,200,201,202,111],{},"For a full breakdown of compliance, certifications, and Business Associate Agreement (BAA) details, visit the ",[75,203,205],{"href":204},"\u002Ftrust\u002F","Trust Center",[18,207,209],{"id":208},"key-security-features","Key security features",[211,212,213,226],"table",{},[214,215,216],"thead",{},[217,218,219,223],"tr",{},[220,221,222],"th",{},"Feature",[220,224,225],{},"What it does",[227,228,229,240,250,264,274,284],"tbody",{},[217,230,231,237],{},[232,233,234],"td",{},[32,235,236],{},"End-to-End Encryption",[232,238,239],{},"All data encrypted at rest and in transit using industry-standard TLS\u002FAES-256",[217,241,242,247],{},[232,243,244],{},[32,245,246],{},"Secure Authentication",[232,248,249],{},"Multi-factor login protects all provider accounts",[217,251,252,257],{},[232,253,254],{},[32,255,256],{},"Role-Based Access Controls",[232,258,259,260],{},"Staff only see and manage what their role permits, ",[75,261,263],{"href":262},"\u002Fhelp\u002Fclinic\u002Froles\u002F","learn about roles",[217,265,266,271],{},[232,267,268],{},[32,269,270],{},"Audit Logs",[232,272,273],{},"All activity is logged and time-stamped for transparency",[217,275,276,281],{},[232,277,278],{},[32,279,280],{},"Jurisdiction-Compliant Hosting",[232,282,283],{},"Data residency options for US and Canadian providers",[217,285,286,291],{},[232,287,288],{},[32,289,290],{},"BAA Available",[232,292,293],{},"Business Associate Agreements available on request",[18,295,297],{"id":296},"your-rights-as-a-provider","Your rights as a provider",[26,299,300,306,312],{},[29,301,302,305],{},[32,303,304],{},"Right to access",": Export patient data at any time via the Reports section",[29,307,308,311],{},[32,309,310],{},"Right to portability",": Clinical records export in standardized formats",[29,313,314,317],{},[32,315,316],{},"Right to erasure",": Request permanent deletion of account data, subject to local clinical record retention laws",[18,319,321],{"id":320},"further-reading","Further reading",[26,323,324,329,334,340,346],{},[29,325,326],{},[75,327,328],{"href":204},"Trust Center & security overview",[29,330,331],{},[75,332,333],{"href":128},"Legal documents & Privacy Policy",[29,335,336],{},[75,337,339],{"href":338},"\u002Flegal\u002Fbaa-policy\u002F","BAA Policy",[29,341,342],{},[75,343,345],{"href":344},"\u002Fsources\u002F","Clinical evidence & sources",[29,347,348],{},[75,349,93],{"href":92},{"title":136,"searchDepth":137,"depth":137,"links":351},[352,353,354,355],{"id":177,"depth":140,"text":178},{"id":208,"depth":140,"text":209},{"id":296,"depth":140,"text":297},{"id":320,"depth":140,"text":321},{},"\u002Fhelp\u002Farticles\u002Fdata-protection",{"title":78,"description":152},"data-protection","help\u002Farticles\u002Fdata-protection","helpArticle","2025-06-26T20:23:38Z","mlO6UnRigzD9KrpGIjXsZBv2AUHBz6pcs0mSIWzIAlQ",{"id":365,"title":366,"body":367,"category":151,"categoryTitle":6,"description":508,"extension":146,"meta":509,"navigation":148,"path":510,"seo":511,"slug":512,"sourceFile":152,"stem":513,"subcategory":152,"subcategoryTitle":152,"type":361,"updatedAt":514,"__hash__":515},"helpArticles\u002Fhelp\u002Farticles\u002Ffaq.md","Privacy and Security FAQ",{"type":8,"value":368,"toc":492},[369,373,378,381,401,405,411,415,418,430,434,438,441,446,450,453,457,467,471,475,481,485],[18,370,372],{"id":371},"data-privacy","Data Privacy",[374,375,377],"h3",{"id":376},"what-are-my-rights-regarding-data-privacy","What are my rights regarding data privacy?",[11,379,380],{},"As a provider using HiBoop, you and your patients have the following rights regarding clinical data:",[26,382,383,389,395],{},[29,384,385,388],{},[32,386,387],{},"Right to Access:"," You can access and export patient data at any time from the Reports section.",[29,390,391,394],{},[32,392,393],{},"Right to Portability:"," Clinical records can be exported in standardized formats for use in other systems.",[29,396,397,400],{},[32,398,399],{},"Right to Erasure:"," You can request the permanent deletion of account data, subject to local clinical record retention laws.",[374,402,404],{"id":403},"does-hiboop-share-patient-data-with-third-parties","Does HiBoop share patient data with third parties?",[11,406,407,410],{},[32,408,409],{},"No."," HiBoop does not sell, lease, or share patient-identifiable data with third parties for marketing or any other non-clinical purpose. Data is only processed to provide the core services of the platform (e.g., scoring assessments and generating reports).",[374,412,414],{"id":413},"how-do-i-review-hiboops-terms-of-service-and-privacy-policy","How do I review HiBoop's Terms of Service and Privacy Policy?",[11,416,417],{},"Our full legal documentation is always available:",[26,419,420,425],{},[29,421,422],{},[75,423,424],{"href":128},"Privacy Policy & Terms of Service",[29,426,427],{},[75,428,429],{"href":338},"BAA Policy (Business Associate Agreement)",[18,431,433],{"id":432},"security-standards","Security Standards",[374,435,437],{"id":436},"is-hiboop-hipaa-and-pipeda-compliant","Is HiBoop HIPAA and PIPEDA compliant?",[11,439,440],{},"Yes. HiBoop is designed from the ground up to meet and exceed healthcare data security standards in the US (HIPAA) and Canada (PIPEDA\u002FPHIPA). All data is encrypted in transit and at rest using industry-standard protocols.",[11,442,443,444,111],{},"For a detailed breakdown of certifications and security architecture, see the ",[75,445,205],{"href":204},[374,447,449],{"id":448},"where-is-data-stored","Where is data stored?",[11,451,452],{},"HiBoop uses jurisdiction-compliant cloud infrastructure. US providers have data hosted within the United States; Canadian providers can request Canadian data residency.",[374,454,456],{"id":455},"is-a-business-associate-agreement-baa-available","Is a Business Associate Agreement (BAA) available?",[11,458,459,460,462,463,466],{},"Yes. A BAA is available for US-based covered entities and their business associates. See the ",[75,461,339],{"href":338}," for details, or ",[75,464,465],{"href":109},"contact our team"," to request one.",[18,468,470],{"id":469},"clinical-evidence","Clinical Evidence",[374,472,474],{"id":473},"where-do-the-assessments-come-from-are-they-validated","Where do the assessments come from? Are they validated?",[11,476,477,478,111],{},"All assessments in HiBoop are sourced from published clinical research. We do not modify scale wording, scoring, or thresholds. A full list of citations and references is available in the ",[75,479,480],{"href":344},"Clinical Sources directory",[374,482,484],{"id":483},"does-hiboop-interpret-assessment-results-for-me","Does HiBoop interpret assessment results for me?",[11,486,487,488],{},"No. HiBoop scores assessments and surfaces severity labels based on published cutoffs, but clinical interpretation and diagnosis are always the clinician's responsibility. ",[75,489,491],{"href":490},"\u002Fhelp\u002Fsettings\u002Finterpretation\u002F","More on how scoring works →",{"title":136,"searchDepth":137,"depth":137,"links":493},[494,499,504],{"id":371,"depth":140,"text":372,"children":495},[496,497,498],{"id":376,"depth":137,"text":377},{"id":403,"depth":137,"text":404},{"id":413,"depth":137,"text":414},{"id":432,"depth":140,"text":433,"children":500},[501,502,503],{"id":436,"depth":137,"text":437},{"id":448,"depth":137,"text":449},{"id":455,"depth":137,"text":456},{"id":469,"depth":140,"text":470,"children":505},[506,507],{"id":473,"depth":137,"text":474},{"id":483,"depth":137,"text":484},"Frequently asked questions about data protection, patient privacy, and security standards at HiBoop.",{},"\u002Fhelp\u002Farticles\u002Ffaq",{"title":366,"description":508},"faq","help\u002Farticles\u002Ffaq","2026-03-07T12:00:00Z","yD0_lDHseQ13fkitopa0Z59js42NZ6APlEan81CxrR4",1791793991426]