{"id":6083,"date":"2025-08-24T13:32:43","date_gmt":"2025-08-24T17:32:43","guid":{"rendered":"https:\/\/migihub.com\/conformite-hipaa\/"},"modified":"2025-09-01T11:57:59","modified_gmt":"2025-09-01T15:57:59","slug":"conformite-hipaa","status":"publish","type":"page","link":"https:\/\/migihub.com\/fr\/conformite-hipaa\/","title":{"rendered":"Conformit\u00e9 HIPAA"},"content":{"rendered":"\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\tMigiHub Documentation - HIPAA Compliance<\/title><link rel=\"stylesheet\" href=\"https:\/\/cdnjs.cloudflare.com\/ajax\/libs\/font-awesome\/6.4.0\/css\/all.min.css\"><style>* {\n margin: 0;\n padding: 0;\n box-sizing: border-box;\n font-family: 'Segoe UI', Tahoma, Geneva, Verdana, sans-serif;\n }\n \n body {\n background-color: #f4f5fa;\n color: #361c5f;\n line-height: 1.6;\n min-height: 100vh;\n }\n \n .container {\n display: flex;\n max-width: 1400px;\n margin: 0 auto;\n padding: 0 20px;\n }\n \n .sidebar {\n width: 280px;\n position: sticky;\n top: 0;\n align-self: flex-start;\n height: 100vh;\n overflow-y: auto;\n padding: 40px 20px 40px 0;\n border-right: 1px solid #EDE4FF;\n }\n \n .sidebar-header {\n padding: 0 0 20px 0;\n margin-bottom: 15px;\n }\n \n .sidebar-header h1 {\n font-size: 24px;\n color: #2F0A61;\n margin-bottom: 5px;\n font-weight: 700;\n }\n \n .sidebar-header .update-date {\n font-size: 12px;\n color: #8C57FF;\n font-weight: 500;\n }\n \n .sidebar-nav ul {\n list-style: none;\n }\n \n .sidebar-nav li {\n margin-bottom: 5px;\n }\n \n .sidebar-nav a {\n display: block;\n padding: 12px 15px;\n text-decoration: none;\n color: #361c5f;\n border-radius: 6px;\n transition: all 0.2s ease;\n font-weight: 500;\n position: relative;\n }\n \n .sidebar-nav a:hover {\n background-color: #EDE4FF;\n color: #8C57FF;\n }\n \n .sidebar-nav a.active {\n background-color: #EDE4FF;\n color: #8C57FF;\n font-weight: 600;\n }\n \n .sidebar-nav a.active:before {\n content: '';\n position: absolute;\n left: 0;\n top: 0;\n height: 100%;\n width: 4px;\n background-color: #8C57FF;\n border-radius: 0 4px 4px 0;\n }\n \n .content {\n flex: 1;\n padding: 40px 0 40px 40px;\n }\n \n .section {\n background: white;\n padding: 30px;\n border-radius: 12px;\n box-shadow: 0 4px 6px rgba(0, 0, 0, 0.05);\n margin-bottom: 30px;\n }\n \n .section h2 {\n font-size: 28px;\n color: #2F0A61;\n margin-bottom: 25px;\n padding-bottom: 15px;\n border-bottom: 1px solid #EDE4FF;\n font-weight: 700;\n }\n \n .section h3 {\n font-size: 22px;\n color: #8C57FF;\n margin: 35px 0 18px;\n font-weight: 600;\n }\n \n .section h4 {\n font-size: 18px;\n color: #5e17eb;\n margin: 25px 0 15px;\n font-weight: 600;\n }\n \n .section p {\n margin-bottom: 18px;\n color: #361c5f;\n line-height: 1.7;\n }\n \n .highlight {\n background-color: #EDE4FF;\n border-left: 4px solid #8C57FF;\n padding: 20px;\n margin: 25px 0;\n border-radius: 0 6px 6px 0;\n }\n \n .definition-list {\n background: #EDE4FF;\n border-radius: 8px;\n padding: 25px;\n margin: 30px 0;\n }\n \n .definition-list dt {\n font-weight: 600;\n color: #6011cf;\n margin-bottom: 5px;\n }\n \n .definition-list dd {\n margin-bottom: 15px;\n padding-left: 20px;\n color: #361c5f;\n }\n \n .last-updated {\n background: #fffbeb;\n padding: 15px;\n border-radius: 8px;\n margin: 30px 0;\n border-left: 4px solid #feac38;\n font-size: 14px;\n }\n \n .section-content {\n max-width: 800px;\n }\n \n ul {\n padding-left: 25px;\n margin: 15px 0;\n }\n \n ul li {\n margin-bottom: 10px;\n color: #361c5f;\n }\n \n .terms-header {\n text-align: center;\n margin-bottom: 30px;\n padding-bottom: 20px;\n border-bottom: 2px solid #EDE4FF;\n }\n \n .terms-header h2 {\n font-size: 32px;\n color: #2F0A61;\n margin-bottom: 10px;\n }\n \n .terms-meta {\n display: flex;\n justify-content: center;\n gap: 30px;\n margin-top: 15px;\n font-size: 14px;\n color: #8C57FF;\n }\n \n @media (max-width: 992px) {\n .container {\n flex-direction: column;\n padding: 0;\n }\n \n .sidebar {\n width: 100%;\n height: auto;\n position: relative;\n border-right: none;\n border-bottom: 1px solid #EDE4FF;\n padding: 30px 20px;\n height: auto;\n }\n \n .content {\n padding: 30px 20px;\n }\n }\n \n @media (max-width: 768px) {\n .sidebar {\n padding: 20px 15px;\n }\n \n .content {\n padding: 20px 15px;\n }\n \n .section {\n padding: 20px;\n }\n \n .section h2 {\n font-size: 24px;\n }\n \n .section h3 {\n font-size: 20px;\n }\n \n .terms-header h2 {\n font-size: 26px;\n }\n \n .terms-meta {\n flex-direction: column;\n gap: 10px;\n }\n }\n <\/style><\/head><body><!-- This is the HIPAA Compliance page --><div class=\"container\"><!-- Sidebar Navigation --><div class=\"sidebar\"><div class=\"sidebar-header\"><h1>Categories<\/h1><\/div><nav class=\"sidebar-nav\"><ul><li><a href=\"https:\/\/migihub.com\/fr\/modalites-et-politiques\/\">Terms of Use<\/a><\/li><li><a href=\"https:\/\/migihub.com\/fr\/politique-de-confidentialite\/\">Privacy policy<\/a><\/li><li><a href=\"https:\/\/migihub.com\/fr\/traitement-des-donnees\/\">Data Processing Agreement<\/a><\/li><li><a href=\"https:\/\/migihub.com\/fr\/conformite-au-gdpr\/\">GDPR Compliance<\/a><\/li><li><a href=\"https:\/\/migihub.com\/fr\/conformite-hipaa\/\" class=\"active\">HIPAA Compliance<\/a><\/li><li><a href=\"https:\/\/migihub.com\/fr\/protection-des-donnees\/\">Data Privacy Framework<\/a><\/li><li><a href=\"https:\/\/migihub.com\/fr\/securite-et-fiabilite\/\">Security & Reliability<\/a><\/li><li><a href=\"https:\/\/migihub.com\/fr\/lignes-directrices-anti-spam-et-pour-une-messagerie-responsable\/\">Anti-Spam Guidelines<\/a><\/li><li><a href=\"https:\/\/migihub.com\/fr\/politique-en-matiere-de-cookies-et-consentement\/\">Cookie Policy<\/a><\/li><\/ul><\/nav><\/div><!-- Main Content --><div class=\"content\"><!-- HIPAA Compliance Section --><section id=\"terms\" class=\"section\"><div class=\"section-content\"><div class=\"terms-header\"><h2>HIPAA Compliance at MigiHub<\/h2><div class=\"terms-meta\"><span><strong>Last Updated:<\/strong> September 1, 2025<\/span><\/div><\/div><p>MigiHub is a software-as-a-service platform developed and owned by InnuCloud Experts Inc. We design and operate MigiHub to support our customers' obligations under the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the HITECH Act.<\/p><h3>Our role under HIPAA<\/h3><ul><li><strong>Business Associate (BA):<\/strong> When a HIPAA-covered entity uses MigiHub and enters or stores PHI in the platform, InnuCloud acts as a BA and processes PHI only to provide the service and as instructed by the covered entity.<\/li><li><strong>Controller (our own data):<\/strong> For website analytics, billing, and account administration of our own customers, InnuCloud acts as a data controller (not a BA).<\/li><\/ul><p>We make a Business Associate Agreement (BAA) available to covered-entity customers and bind HIPAA-relevant subcontractors to BA-level terms.<\/p><h3>What counts as PHI in MigiHub<\/h3><p>Depending on your configuration, PHI may include booking\/assignment details (date\/time, location), contact information, notes or attachments shared for appointment preparation, interpreter timesheets with patient identifiers, and optional geolocation if you enable it. Customers should apply the minimum necessary principle when entering PHI.<\/p><h3>Security safeguards (HIPAA Security Rule)<\/h3><ul><li>Unique user IDs and Single Sign-On (SSO) support<\/li><li>Role-based access control and least-privilege permissions<\/li><li>Encryption in transit (TLS) and encryption at rest<\/li><li>Audit logging and monitoring of security-relevant events<\/li><li>Backups and recovery testing to support availability<\/li><li>Vulnerability management and security patching<\/li><li>Documented incident response procedures<\/li><\/ul><h3>Minimum Necessary by design<\/h3><p>We provide field-level configuration, roles\/permissions, and data-handling guidance to help customers limit PHI exposure to the minimum necessary for scheduling, fulfillment, and billing.<\/p><h3>De-identification options<\/h3><p>Where feasible, customers can reduce risk by avoiding PHI in free-text notes and attachments, or by using de-identified data sets for analytics. HIPAA recognizes two de-identification methods: Safe Harbor (removal of 18 identifiers) and Expert Determination.<\/p><h3>Breach notification (HITECH)<\/h3><p>If InnuCloud discovers a breach of unsecured PHI in our capacity as a Business Associate, we will notify the covered entity without undue delay and provide information to support regulatory notifications under the Breach Notification Rule (45 CFR \u00a7\u00a7 164.400\u2013414). The BAA specifies exact timeframes and details.<\/p><h3>Subcontractors (downstream BAs)<\/h3><p>We assess and contractually bind relevant subcontractors that create, receive, maintain, or transmit PHI on our behalf to HIPAA-grade obligations, including security safeguards and breach notification.<\/p><h3>No official HIPAA certification<\/h3><p>There is no government-recognized HIPAA certification. The Office for Civil Rights (OCR) requires ongoing risk analysis and evaluation. Organizations may use third parties to evaluate controls, but certification itself is not mandated or endorsed by HHS. We avoid misleading seals and demonstrate compliance through controls, BAAs, and documentation.<\/p><h3>Customer responsibilities<\/h3><ul><li>Determine whether you are a covered entity or business associate and configure MigiHub to limit PHI intake.<\/li><li>Execute the BAA with InnuCloud.<\/li><li>Manage user access\/SSO, retention, and export settings aligned with your internal policies.<\/li><li>Train your workforce and maintain your own HIPAA policies and procedures.<\/li><\/ul><h3>Contact<\/h3><p>InnuCloud Experts Inc. (MigiHub)<br\/>2020 Trans-Canada Hwy, Dorval, Quebec H9P 2N4, Canada<br\/>Email: privacy@migihub.com<\/p><\/div><\/section><\/div><\/div><script>\/\/ This script will automatically set the active class based on current page\n document.addEventListener('DOMContentLoaded', function() {\n \/\/ Get current page URL\n const currentPage = window.location.pathname.split('\/').pop();\n \n \/\/ If we're on the root page, default to terms.html\n if (currentPage === '' || currentPage === 'index.html') {\n \/\/ Find and activate the Terms of Use link\n const termsLink = document.querySelector('.sidebar-nav a[href=\"terms.html\"]');\n if (termsLink) {\n termsLink.classList.add('active');\n }\n return;\n }\n \n \/\/ Find all navigation links\n const navLinks = document.querySelectorAll('.sidebar-nav a');\n \n \/\/ Remove active class from all links\n navLinks.forEach(link => {\n link.classList.remove('active');\n \n \/\/ Check if this link's href matches current page\n const linkPage = link.getAttribute('href');\n if (linkPage === currentPage) {\n link.classList.add('active');\n }\n });\n });\n <\/script><\/body><\/html>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>MigiHub Documentation – HIPAA Compliance Categories Terms of Use Privacy policy Data Processing Agreement GDPR Compliance HIPAA Compliance Data Privacy Framework Security & Reliability Anti-Spam Guidelines Cookie Policy HIPAA Compliance at MigiHub Last Updated: September 1, 2025 MigiHub is a software-as-a-service platform developed and owned by InnuCloud Experts Inc. We design and operate MigiHub to […]<\/p>\n","protected":false},"author":2,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-6083","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/migihub.com\/fr\/wp-json\/wp\/v2\/pages\/6083","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/migihub.com\/fr\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/migihub.com\/fr\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/migihub.com\/fr\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/migihub.com\/fr\/wp-json\/wp\/v2\/comments?post=6083"}],"version-history":[{"count":11,"href":"https:\/\/migihub.com\/fr\/wp-json\/wp\/v2\/pages\/6083\/revisions"}],"predecessor-version":[{"id":6520,"href":"https:\/\/migihub.com\/fr\/wp-json\/wp\/v2\/pages\/6083\/revisions\/6520"}],"wp:attachment":[{"href":"https:\/\/migihub.com\/fr\/wp-json\/wp\/v2\/media?parent=6083"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}