HIPAA Compliant

Online HIPAA Compliant Dental Software

CareStack is committed to keeping all Protected Health Information (PHI) secure & compliant. We keep systems and procedures up-to-date and in compliance with all related regulations, and we understand that keeping client information safe is of the utmost importance.

Under HIPAA privacy rules, CareStack is a Business Associate. As such, we comply with all applicable rules and regulations of the Health Insurance Portability and Accountability Act (HIPAA) of 1996, and we have instituted policies and procedures to ensure this is done.

All employees are required to re-take HIPAA training every two years, and we have Information Security procedures in place to ensure that our policies and procedures related to information and physical security are up-to-date and follow any new or revised regulations. These policies and procedures are frequently reviewed to maintain compliance with HIPAA rules and regulations.

For the ultimate dental software, choose the solution that’s scalable for growing dental start-ups or large DSOs and still affordable for small mobile providers and single-office dental practices. Choose CareStack!

Smiling woman with a laptop, displaying HIPAA compliance icons and a default scheduler view with options like Patient, HIPAA, Production, and Claim.

Key Benefits

Keep Patient Information Safe and Compliant

A full audit trail helps keep a finger on the pulse of compliance.

Manage users with job function based permission.

Communicate securely with patients via encrypted email and messaging.

Protection against PHI loss with automatic backups and recovery.

Reduction in liability for your organization and executives.

Main Highlights

Protect Patient Data with Confidence

A woman shakes hands with a dental professional in an office. Overlay text displays options: Patient Information, Appointments, Insurance Details, Treatment Plans.

A person types on a laptop. A screen shows options for 'Default Scheduler View' and a 'HIPAA Compliant' badge with a checkmark.

Man pointing at computer screen with code; icons labeled "Audit Trail," "Data Extracts," "Databases," "Web Portal," and "Backups" floating nearby.

Entities

Covered EntitiesCareStack clients are considered Covered Entities because they hold first-hand Patient information, including treatment info, appointments, addresses, and contact details, and electronically transmit health information in connection with transactions.
Business AssociateCareStack itself is considered a "business associate," since we perform functions or activities on behalf of a covered entity and can access patient data.

Rules

Privacy RuleThe HIPAA Privacy Rule protects individuals' medical records and sets limits on the use and disclosure of personal health information without patient authorization. Patients may also examine and obtain copies of their health records, and request corrections.
Security RuleThe HIPAA Security Rule sets standards to protect electronic health info by requiring safeguards to ensure its confidentiality and security.

HIPAA Compliance Rules in CareStack

Restricted Access Only necessary CareStack personnel can access relevant databases, web portal data, backups, and data extracts of any form.
Logs & RecordingCareStack team's activities are recorded automatically by built-in software on their workstation machines. Privacy of the team members will be protected; logs are available in case of an incident.
Security Officer
If practices encounter discrepancies, report to the Security Officer by sending an email to hipaa@carestack.com. (Please note: it is the practice’s duty to report any discrepancy.)
Background Updates CareStack team will update the HIPAA compliance rules as and when needed, based on new laws enacted/technological advancements.

HIPAA Compliance Actions at Your Practice

Discrepancies
Report to the Security Officer if you see any discrepancies. Send an email to hipaa@carestack.com describing the issue and context.
Encrypted e-PHI If you want to send the e-PHI data, then always encrypt and send.
Passwords The password should be shared in a separate email.
Redacting If you are sending/uploading images, then blur the PHI information.
Personal Steps Always secure your laptop/desktop, especially if it contains e-PHI data.
Offline Use If you need to print information that contains PHI data, make sure to keep it secure or shred it after use.
DataStoresAlways remember to keep PHI data on your desktop/laptop to an absolute minimum. Use the secure DataStores which are held in CareStack Office/Azure VM/Azure SQL.

Feeling Limited with Your Dental Software?

CareStack’s modern user interface is easy to learn. Book a demo with us to learn how CareStack can help you improve patient growth and reduce costs.

FAQ

Why CareStack Is the Best Dental Practice Management Software

View All Queries->

Where can providers conduct teledentistry?

HIPAA best practices require healthcare providers to conduct telehealth in private settings, such as a doctor in a clinic or office connecting to a patient who is at home or at another clinic.

Does HIPAA require software updates?

The HIPAA Security Rule requires that all Covered Entities must perform “periodic security updates” and have “procedures for guarding against, detecting and reporting malicious software”

How secure are online payments?

All transactions are processed through a secure website and all transactions are encrypted. Any personal information entered, such as credit card information, will be used only for the one-time transaction and will not be saved on our system or shared for any other purpose.

More questions?Contact us at
support@carestack.com