Security & HIPAA trust center

How HealthyRides protects patient information, for the security and compliance reviewers of a facility or provider.

HealthyRides books non-emergency medical transport between healthcare facilities and transport providers. It is a business associate of each facility organization it serves. A provider organization receives protected health information (PHI) from facilities through HealthyRides, and the business associate agreement binds it to the same limits on use and the same safeguards (platform/packages/domain/src/agreements/texts/baa-v2.ts; docs/prd/healthyrides-mvp-prd.md).

Each statement on these pages links to the decision record, the rule or the code that makes it true (platform/apps/docs/lib/citations.ts).

Pages

• PHI handling
• The audit log
• Tenant isolation
• Access control and roles
• Encryption
• Sign-in and session lifetime
• Sub-processors
• Business associate agreements

What this site holds

This documentation site holds no PHI and no customer data. It has no database, no secrets and no sign-in, and its screenshots and videos use synthetic data only (docs/decisions/0052-the-docs-site-and-media-cdn-are-public-non-phi-services.md).