Security
Security and data protection
The controls below describe how OpAgent handles practice data today.
Business Associate Agreements. OpAgent works with practices under a Business Associate Agreement.
Encryption. Data is encrypted in transit and at rest.
Separation between practices. Each practice's data is kept separate from every other practice's, and access is limited to that practice's authorized users.
Access logging. Access to patient information is logged.
Approval before saving to the chart. Clinical drafts, such as imaging reports and referrals, are saved to athenaOne only after a physician approves them.
Staff submit administrative work. Prepared authorization packets and payment follow-up are reviewed and submitted by practice staff. OpAgent does not submit them on its own.
SOC 2: OpAgent does not yet have a SOC 2 report. When one is issued, we will state its type and date here.
Questions about Business Associate Agreements, data handling, or the athenaOne integration are welcome during a demo.