• About Health E-Docs
• User Identification
• Object Access Controls
• Auditing
• Server Security

Improve Medical Workflow and Record Availability

Maximum Security for Electronic Medical Records and Exchange Services Portal

At the Medical Records Scanning and Hosting Center Health E-Docs™ Electronic Medical Records (“EMR”) hosting and exchange services portal is fully HIPAA Compliant and has been designed to provide maximum protection and security for our customers and their Electronic Medical records.

MRSHC Hosting facilities are located in a rural area with limited visibility and access. The facility has been secured for U.S. Government client document management work and has limited access. Employees of the facility have undergone varying degrees of clearance and background checks prior to employment.

Equipment and storage resources have been designed to provide access assurance and safe storage of the objects placed in the portal. Scheduled and routine back-ups and offsite storage of the system through use of RAID and DLT Tape support services ensures our success in this area. Systems engineering personnel are on call 24/7 and within twenty minute response time to facility. Multiple T-1 connections directly to a major local Internet Access Provider insure the site will be up 24/7 with very little possibility of interference from outside sources.

Health E-Docs™ utilizes SharePoint 2007 and Edge Vault secure web based repository software to provide its document H2H ( Healthcare Provider to Healthcare Provider) and H2P ( Healthcare Provider to Patient) services. System security is designed to provide confidentiality, integrity, availability, and legitimate use of the Health E-Docs™ EMR document repository. To effectively implement such a secure system, the system must address the following items:

• Identification of the authorized users (identification and authentication)
• Specification of what users will have access to (object access controls) and what types of operations users can perform on those objects
• Auditing to determine what types of activities have occurred (e.g., the ability to maintain accountability via auditing)
• Server security environment. Server capabilities and controls further address issues such as data and system integrity, reliability and availability, and may extend conditional access controls and provide assurance that all the above are operating properly and consistently