Healthcare

HIPAA compliance for healthcare practices

Patient portals, booking forms and email carry protected health information every day. Oncrypt checks each one and shows you what to fix first.

Risks in healthcare

Tracking pixels on patient pages

Analytics and advertising tags on pages about appointments or conditions can send visit details to outside companies. Regulators have warned providers about this risk.

Insecure intake forms

Intake forms that submit over weak connections or skip input checks can expose names, dates of birth and medical history. Oncrypt tests how each form handles submitted data.

Email that carries patient details

Misconfigured email domains let attackers send fake messages in the practice's name. Unprotected mailboxes expose patient messages and attachments. Oncrypt checks SPF, DKIM and DMARC on your domain and reviews mailbox settings.

What Oncrypt checks

Tracking tags and third party scripts on every public page
Forms, portals and booking pages for weak transport and input handling
SPF, DKIM and DMARC records on your sending domain
Admin accounts, multi factor sign in and staff access
Backups, device encryption and patch levels on staff devices
Vendor access and the subprocessors that touch patient data

Find the gaps before a regulator or auditor does

Start with a free website check, then work through the gaps with our team.

Talk to us

HIPAA compliance for healthcare practices

Risks in healthcare

Tracking pixels on patient pages

Insecure intake forms

Email that carries patient details

What Oncrypt checks

Relevant frameworks

HIPAA

SOC 2

ISO 27001

Find the gaps before a regulator or auditor does