HIPAA Compliance Notice

This notice outlines our commitment to handling deliveries containing Protected Health Information (PHI) with the care and security required under the Health Insurance Portability and Accountability Act (HIPAA).

Our Role as a Courier

Under HIPAA, a courier service acts as a "conduit." We transport sealed, private information from one covered entity (e.g., your clinic) to another. We do not open, access, or store the PHI within the packages.

Your Responsibilities as the Sender

To maintain compliance, you, the sender, are responsible for ensuring that all PHI is:

• Securely Sealed: Placed in a tamper-evident envelope or package before pickup.
• Encrypted (if digital): Any digital media containing PHI should be encrypted.
• Properly Addressed: Clearly labeled for the intended recipient.

Our Commitments

• HIPAA-Aware Training: Our drivers are trained in the importance of chain-of-custody and secure handling of sensitive deliveries.
• Chain of Custody: We log every step of the delivery process, from pickup to drop-off, with timestamps and signatures.
• Secure Transport: All items are transported securely in our vehicles.
• Data Security: Any metadata we collect for tracking is encrypted and automatically purged after 30 days. We never view or store PHI content.

Business Associate Addendum (BAA)

For high-volume partners or those requiring a formal agreement, we offer a Business Associate Addendum (BAA). A BAA is a contract that legally obligates us to uphold HIPAA security standards. To learn more or request a BAA, please visit our BAA request page.

Disclaimer: This notice is for informational purposes and does not constitute legal advice. Please consult with your legal counsel for specific HIPAA compliance questions.