Blog
HIPAA email, fax, and forms for clinic teams
Practical articles on the communication work physician offices already do: healthcare email, cloud fax, and personalized intake, with a BAA and an audit trail.
The BAA gap when staff forward PHI to personal inboxes
Your vendor BAA does not cover a staff member's Yahoo account. Forwarding is how official programs quietly become unofficial.
Texting vs secure email vs portal messages
Patients want texts. HIPAA wants controls. Use SMS for logistics, and move anything clinical to email, forms, or a portal.
TLS, archiving, and the email logs OCR actually asks about
Investigators rarely ask if you "take security seriously." They ask who accessed a message and whether you can prove encryption was on.
How to handle a HIPAA incident that started in an inbox
A misdirected referral is an incident first. Whether it becomes a reportable breach depends on what you do in the next hours.
Why consumer email is not enough for PHI
TLS on Gmail or Outlook does not replace a BAA, retention you can explain, or controls that stop auto-forwarding to a personal phone.
HIPAA-compliant email for small medical practices
What independent clinics actually need from healthcare email: a BAA, encryption, an audit trail, and a staff inbox people will use.