[{"data":1,"prerenderedAt":528},["ShallowReactive",2],{"help-article-en-data-protection":3,"help-category-en-privacy":231},{"article":4,"fallback":230},{"id":5,"title":6,"body":7,"category":217,"categoryTitle":218,"description":219,"extension":220,"meta":221,"navigation":222,"path":223,"seo":224,"slug":225,"sourceFile":219,"stem":226,"subcategory":219,"subcategoryTitle":219,"type":227,"updatedAt":228,"__hash__":229},"helpArticles\u002Fhelp\u002Farticles\u002Fdata-protection.md","How does HiBoop protect patient data?",{"type":8,"value":9,"toc":208},"minimark",[10,19,25,30,33,52,61,65,149,153,173,177],[11,12,13,14,18],"p",{},"HiBoop is designed with a ",[15,16,17],"strong",{},"privacy-first architecture"," to safeguard sensitive health information. We follow stringent protocols to ensure all data is secure, accessible only by authorized users, and compliant with relevant privacy regulations.",[20,21,22],"blockquote",{},[11,23,24],{},"All assessment responses are stored securely and only accessible to authorized users within your clinic. Your patients’ data belongs to them, and to you as their care provider. HiBoop simply helps you handle it responsibly.",[26,27,29],"h2",{"id":28},"compliance-standards","Compliance standards",[11,31,32],{},"HiBoop complies with:",[34,35,36,43,49],"ul",{},[37,38,39,42],"li",{},[15,40,41],{},"HIPAA"," (United States)",[37,44,45,48],{},[15,46,47],{},"PIPEDA \u002F PHIPA"," (Canada)",[37,50,51],{},"Additional international standards, where applicable",[11,53,54,55,60],{},"For a full breakdown of compliance, certifications, and Business Associate Agreement (BAA) details, visit the ",[56,57,59],"a",{"href":58},"\u002Ftrust\u002F","Trust Center",".",[26,62,64],{"id":63},"key-security-features","Key security features",[66,67,68,81],"table",{},[69,70,71],"thead",{},[72,73,74,78],"tr",{},[75,76,77],"th",{},"Feature",[75,79,80],{},"What it does",[82,83,84,95,105,119,129,139],"tbody",{},[72,85,86,92],{},[87,88,89],"td",{},[15,90,91],{},"End-to-End Encryption",[87,93,94],{},"All data encrypted at rest and in transit using industry-standard TLS\u002FAES-256",[72,96,97,102],{},[87,98,99],{},[15,100,101],{},"Secure Authentication",[87,103,104],{},"Multi-factor login protects all provider accounts",[72,106,107,112],{},[87,108,109],{},[15,110,111],{},"Role-Based Access Controls",[87,113,114,115],{},"Staff only see and manage what their role permits, ",[56,116,118],{"href":117},"\u002Fhelp\u002Fclinic\u002Froles\u002F","learn about roles",[72,120,121,126],{},[87,122,123],{},[15,124,125],{},"Audit Logs",[87,127,128],{},"All activity is logged and time-stamped for transparency",[72,130,131,136],{},[87,132,133],{},[15,134,135],{},"Jurisdiction-Compliant Hosting",[87,137,138],{},"Data residency options for US and Canadian providers",[72,140,141,146],{},[87,142,143],{},[15,144,145],{},"BAA Available",[87,147,148],{},"Business Associate Agreements available on request",[26,150,152],{"id":151},"your-rights-as-a-provider","Your rights as a provider",[34,154,155,161,167],{},[37,156,157,160],{},[15,158,159],{},"Right to access",": Export patient data at any time via the Reports section",[37,162,163,166],{},[15,164,165],{},"Right to portability",": Clinical records export in standardized formats",[37,168,169,172],{},[15,170,171],{},"Right to erasure",": Request permanent deletion of account data, subject to local clinical record retention laws",[26,174,176],{"id":175},"further-reading","Further reading",[34,178,179,184,190,196,202],{},[37,180,181],{},[56,182,183],{"href":58},"Trust Center & security overview",[37,185,186],{},[56,187,189],{"href":188},"\u002Flegal\u002F","Legal documents & Privacy Policy",[37,191,192],{},[56,193,195],{"href":194},"\u002Flegal\u002Fbaa-policy\u002F","BAA Policy",[37,197,198],{},[56,199,201],{"href":200},"\u002Fsources\u002F","Clinical evidence & sources",[37,203,204],{},[56,205,207],{"href":206},"\u002Fhelp\u002Fprivacy\u002Ffaq\u002F","Privacy & Security FAQ",{"title":209,"searchDepth":210,"depth":210,"links":211},"",3,[212,214,215,216],{"id":28,"depth":213,"text":29},2,{"id":63,"depth":213,"text":64},{"id":151,"depth":213,"text":152},{"id":175,"depth":213,"text":176},"privacy","Privacy & Security",null,"md",{},true,"\u002Fhelp\u002Farticles\u002Fdata-protection",{"title":6,"description":219},"data-protection","help\u002Farticles\u002Fdata-protection","helpArticle","2025-06-26T20:23:38Z","mlO6UnRigzD9KrpGIjXsZBv2AUHBz6pcs0mSIWzIAlQ",false,[232,375],{"id":5,"title":6,"body":233,"category":217,"categoryTitle":218,"description":219,"extension":220,"meta":373,"navigation":222,"path":223,"seo":374,"slug":225,"sourceFile":219,"stem":226,"subcategory":219,"subcategoryTitle":219,"type":227,"updatedAt":228,"__hash__":229},{"type":8,"value":234,"toc":367},[235,239,243,245,247,259,263,265,327,329,343,345],[11,236,13,237,18],{},[15,238,17],{},[20,240,241],{},[11,242,24],{},[26,244,29],{"id":28},[11,246,32],{},[34,248,249,253,257],{},[37,250,251,42],{},[15,252,41],{},[37,254,255,48],{},[15,256,47],{},[37,258,51],{},[11,260,54,261,60],{},[56,262,59],{"href":58},[26,264,64],{"id":63},[66,266,267,275],{},[69,268,269],{},[72,270,271,273],{},[75,272,77],{},[75,274,80],{},[82,276,277,285,293,303,311,319],{},[72,278,279,283],{},[87,280,281],{},[15,282,91],{},[87,284,94],{},[72,286,287,291],{},[87,288,289],{},[15,290,101],{},[87,292,104],{},[72,294,295,299],{},[87,296,297],{},[15,298,111],{},[87,300,114,301],{},[56,302,118],{"href":117},[72,304,305,309],{},[87,306,307],{},[15,308,125],{},[87,310,128],{},[72,312,313,317],{},[87,314,315],{},[15,316,135],{},[87,318,138],{},[72,320,321,325],{},[87,322,323],{},[15,324,145],{},[87,326,148],{},[26,328,152],{"id":151},[34,330,331,335,339],{},[37,332,333,160],{},[15,334,159],{},[37,336,337,166],{},[15,338,165],{},[37,340,341,172],{},[15,342,171],{},[26,344,176],{"id":175},[34,346,347,351,355,359,363],{},[37,348,349],{},[56,350,183],{"href":58},[37,352,353],{},[56,354,189],{"href":188},[37,356,357],{},[56,358,195],{"href":194},[37,360,361],{},[56,362,201],{"href":200},[37,364,365],{},[56,366,207],{"href":206},{"title":209,"searchDepth":210,"depth":210,"links":368},[369,370,371,372],{"id":28,"depth":213,"text":29},{"id":63,"depth":213,"text":64},{"id":151,"depth":213,"text":152},{"id":175,"depth":213,"text":176},{},{"title":6,"description":219},{"id":376,"title":377,"body":378,"category":217,"categoryTitle":218,"description":520,"extension":220,"meta":521,"navigation":222,"path":522,"seo":523,"slug":524,"sourceFile":219,"stem":525,"subcategory":219,"subcategoryTitle":219,"type":227,"updatedAt":526,"__hash__":527},"helpArticles\u002Fhelp\u002Farticles\u002Ffaq.md","Privacy and Security FAQ",{"type":8,"value":379,"toc":504},[380,384,389,392,412,416,422,426,429,441,445,449,452,457,461,464,468,479,483,487,493,497],[26,381,383],{"id":382},"data-privacy","Data Privacy",[385,386,388],"h3",{"id":387},"what-are-my-rights-regarding-data-privacy","What are my rights regarding data privacy?",[11,390,391],{},"As a provider using HiBoop, you and your patients have the following rights regarding clinical data:",[34,393,394,400,406],{},[37,395,396,399],{},[15,397,398],{},"Right to Access:"," You can access and export patient data at any time from the Reports section.",[37,401,402,405],{},[15,403,404],{},"Right to Portability:"," Clinical records can be exported in standardized formats for use in other systems.",[37,407,408,411],{},[15,409,410],{},"Right to Erasure:"," You can request the permanent deletion of account data, subject to local clinical record retention laws.",[385,413,415],{"id":414},"does-hiboop-share-patient-data-with-third-parties","Does HiBoop share patient data with third parties?",[11,417,418,421],{},[15,419,420],{},"No."," HiBoop does not sell, lease, or share patient-identifiable data with third parties for marketing or any other non-clinical purpose. Data is only processed to provide the core services of the platform (e.g., scoring assessments and generating reports).",[385,423,425],{"id":424},"how-do-i-review-hiboops-terms-of-service-and-privacy-policy","How do I review HiBoop's Terms of Service and Privacy Policy?",[11,427,428],{},"Our full legal documentation is always available:",[34,430,431,436],{},[37,432,433],{},[56,434,435],{"href":188},"Privacy Policy & Terms of Service",[37,437,438],{},[56,439,440],{"href":194},"BAA Policy (Business Associate Agreement)",[26,442,444],{"id":443},"security-standards","Security Standards",[385,446,448],{"id":447},"is-hiboop-hipaa-and-pipeda-compliant","Is HiBoop HIPAA and PIPEDA compliant?",[11,450,451],{},"Yes. HiBoop is designed from the ground up to meet and exceed healthcare data security standards in the US (HIPAA) and Canada (PIPEDA\u002FPHIPA). All data is encrypted in transit and at rest using industry-standard protocols.",[11,453,454,455,60],{},"For a detailed breakdown of certifications and security architecture, see the ",[56,456,59],{"href":58},[385,458,460],{"id":459},"where-is-data-stored","Where is data stored?",[11,462,463],{},"HiBoop uses jurisdiction-compliant cloud infrastructure. US providers have data hosted within the United States; Canadian providers can request Canadian data residency.",[385,465,467],{"id":466},"is-a-business-associate-agreement-baa-available","Is a Business Associate Agreement (BAA) available?",[11,469,470,471,473,474,478],{},"Yes. A BAA is available for US-based covered entities and their business associates. See the ",[56,472,195],{"href":194}," for details, or ",[56,475,477],{"href":476},"\u002Fcontact\u002F","contact our team"," to request one.",[26,480,482],{"id":481},"clinical-evidence","Clinical Evidence",[385,484,486],{"id":485},"where-do-the-assessments-come-from-are-they-validated","Where do the assessments come from? Are they validated?",[11,488,489,490,60],{},"All assessments in HiBoop are sourced from published clinical research. We do not modify scale wording, scoring, or thresholds. A full list of citations and references is available in the ",[56,491,492],{"href":200},"Clinical Sources directory",[385,494,496],{"id":495},"does-hiboop-interpret-assessment-results-for-me","Does HiBoop interpret assessment results for me?",[11,498,499,500],{},"No. HiBoop scores assessments and surfaces severity labels based on published cutoffs, but clinical interpretation and diagnosis are always the clinician's responsibility. ",[56,501,503],{"href":502},"\u002Fhelp\u002Fsettings\u002Finterpretation\u002F","More on how scoring works →",{"title":209,"searchDepth":210,"depth":210,"links":505},[506,511,516],{"id":382,"depth":213,"text":383,"children":507},[508,509,510],{"id":387,"depth":210,"text":388},{"id":414,"depth":210,"text":415},{"id":424,"depth":210,"text":425},{"id":443,"depth":213,"text":444,"children":512},[513,514,515],{"id":447,"depth":210,"text":448},{"id":459,"depth":210,"text":460},{"id":466,"depth":210,"text":467},{"id":481,"depth":213,"text":482,"children":517},[518,519],{"id":485,"depth":210,"text":486},{"id":495,"depth":210,"text":496},"Frequently asked questions about data protection, patient privacy, and security standards at HiBoop.",{},"\u002Fhelp\u002Farticles\u002Ffaq",{"title":377,"description":520},"faq","help\u002Farticles\u002Ffaq","2026-03-07T12:00:00Z","yD0_lDHseQ13fkitopa0Z59js42NZ6APlEan81CxrR4",1791793991980]