Programs that hold up to scrutiny — yours and the auditors'.

Med-IT operates with administrative, technical and physical safeguards designed around the HIPAA Security Rule. Access is role-based, sessions are encrypted in transit, and privileged actions are logged. Where we handle protected health information on behalf of a practice, we do so under a business associate agreement (BAA).

Patients are enrolled with documented consent before monitoring begins. Eligibility and benefits are verified up front, and patients can withdraw at any time. Enrollment records are retained with the program documentation.

Clinical time, device readings, patient contacts and escalations are captured in the platform as they happen. That record is what supports eligible billing — and what makes an audit a matter of exporting a report rather than reconstructing a quarter.

Data is stored in access-controlled databases with encrypted backups. Retention follows the practice's agreement and applicable law. This website is for business communications only — please do not submit protected health information through forms or email.