HIPAA Notice & Data Security

Helix Billing, LLC acts as a Business Associate under the Health Insurance Portability and Accountability Act (HIPAA) to the covered-entity practices we serve. We are committed to protecting the privacy and security of protected health information (PHI) we handle on their behalf. This notice summarizes our practices; it is informational and does not replace a practice's own Notice of Privacy Practices.

Our commitments as a Business Associate

• We enter into a written Business Associate Agreement (BAA) with each practice before handling PHI.
• We use and disclose PHI only as permitted by the BAA and HIPAA — primarily to perform billing, coding, and revenue cycle services.
• We maintain administrative, physical, and technical safeguards required by the HIPAA Security Rule.

Safeguards we maintain

• Encryption of PHI in transit (TLS) and at rest.
• Access controls with role-based permissions and the principle of least privilege.
• Audit logging and monitoring of systems that store or process PHI.
• Workforce training on HIPAA privacy and security.
• SOC 2 Type II controls covering security, availability, and confidentiality.

Breach notification

In the event of a breach of unsecured PHI, we notify the affected practice without unreasonable delay and in accordance with HIPAA's breach-notification requirements.

Important: do not submit PHI through this website

Our public website forms are not intended for protected health information. Please do not include patient names, dates of service, diagnoses, or other PHI in any form on this Site. PHI is exchanged only through secure, agreed-upon channels established under a BAA.

Contact

For questions about our HIPAA practices or to request a BAA, contact our Privacy Officer at privacy@helixbilling.com or (888) 435-4900.