Extending HIPAA Compliance to the Cloud

The cloud promises major benefits for healthcare organizations including lower costs, business continuity and disaster recovery. For many organizations however, Patient Health Information (PHI) rules / HIPAA compliance have limited the ability of organizations to leverage hosted services like disaster recovery, virtualization, call recording and unified communications.

In order for IT professionals and compliance executives to truly take advantage of the cloud they must find a cloud services provider that extends their healthcare organization’s compliance into a HIPAA certified, HITRUST audited, hosted environment.

Done correctly, this is much more than a BAA insurance-backed, rubberstamp. It demands significant investments in technology, audits, procedures and best practices with world-class, secure data centers.

HIPAA’s Security Rule provides for administrative, physical and technical safeguards. Evolve IP complies with the HIPAA security rule because:

  • Evolve IP’s meets all requirements for HIPAA audits, certifications and standardizations
  • Our data centers are Tier 4 and SOC 2 compliant with validated facility, device and media controls
  • Data is secured with biometric access controls, state-of-the-art fire suppression, redundant fiber rings, battery and generator backup and more
  • Evolve IP has the safeguards in place to protect PHI and control access to it, including access control, audit controls, integrity, authentication and transmission security
  • We provide complete data encryption both at rest (in storage) and in transit

How We Can Help

Virtual Data Center

Evolve IP’s cloud meets standards of the HIPAA privacy rule by protecting PHI with access control, audit controls, integrity, authentication and transmission security.

  • Tier 4 and SOC 3 compliant data centers
  • Validated facility, device and media controls
  • Customers’ data is secured with biometric access controls, state-of-the-art fire suppression, redundant fiber rings, battery and generator backup and more

Cloud Phone Systems

Evolve IP’s award-winning cloud IP phone system frees your business from managing carriers, hardware and vendors by providing an enterprise quality hosted PBX with advanced unified communication features and world-class voice quality to any user, in any location, for a low, predictable monthly fee.

  • Complete data encryption at rest for voicemail and call recordings in storage
  • Cloud Connect networking option provides traffic encrypted in transit between the appliance and the our virtual private cloud

Cloud Call Centers

Evolve IP’s cloud based Call Center provides incredible control and benefits to your business that cannot be achieved with cumbersome on-site equipment and systems.

  • When deployed with Evolve IP’s phone system your organization will also take advantage of Evolve IP’s call recordings, which are stored with data encryption at rest.

Disaster Recovery

Evolve IP’s DRaaS suite was designed to allow businesses to determine their level of risk and spend accordingly for Disaster recovery and business continuity (DR/BC).

  • Meets all requirements for HIPAA auditing, certification and standardization.
  • Data centers are Tier 4 and SOC 3 compliant with validated facility, device and media controls.
  • Data is secured with biometric access controls, state-of-the-art fire suppression, redundant fiber rings, battery and generator backup and more.

Virtual Desktops

Evolve IP’s Desktop as a Service (DaaS) frees businesses from the endless cycle of purchasing, supporting, upgrading and ultimately replacing local PCs by providing an untethered “virtual” workspace that can be accessed from anywhere, at any time, on nearly any device, all for a predictable monthly fee.

  • All data is encrypted at rest, in our Tier 4 and SOC3 compliant data centers
  • Data is never housed on the physical device (remains secure in our private cloud)
  • Optional DR Desktop

RMM/MDM

With Remote Monitoring and Management / Mobile Device Management, your organization is empowered to protect critical company assets and ensure end user productivity on consumer devices.

  • Self-manage IT assets and deliver remote support to from a single console.
  • Consistent patching, configuration, anti-virus and backup standards across all desktops.
  • Secure, configure, locate or even erase unrecoverable mobile devices.

A Proven Cloud Services Provider for HIPAA / Healthcare Organizations

You’ll Get a Solid Business Associate Agreement (BAA)

Evolve IP will sign and, most importantly, standby a BAA for your organization. Unlike other providers that simply purchase cyber security insurance, Evolve IP certifies and audits to ensure compliance. With multiple healthcare organizations already using our industry-leading platform you can rest assured that Evolve IP compliance, privacy and security solutions will fit your requirements for cloud-based services including:

The HIPAA Privacy Rule

HIPAA’s Privacy Rule restricts the use and disclosure of PHI. Evolve IP’s cloud complies with the HIPAA privacy rule because:

  • Evolve IP has the safeguards in place to protect PHI and control access to it, including access control, audit controls, integrity, authentication and transmission security
  • We provide complete data encryption both at rest (in storage) and in transit

The HIPAA Security Rule

HIPAA’s Security Rule provides for administrative, physical and technical safeguards. Evolve IP complies with the HIPAA security rule because:

  • Evolve IP’s meets all requirements for HIPAA audits, certifications and standardizations
  • Our data centers are Tier 4 and SOC 2 compliant with validated facility, device and media controls
  • Data is secured with biometric access controls, state-of-the-art fire suppression, redundant fiber rings, battery and generator backup and more

To learn more about how Evolve IP can help you with your cloud-based needs please fill out the form on the left. For an example of how one of our healthcare clients was able to secure their call recordings and maintain HIPAA compliance in our cloud, please click here.

World-Class Healthcare Security

Evolve IP is a leading managed service provider for healthcare companies, including software firms, technology companies and some of the largest Federally Qualified Health Centers (FQHCs) in the nation.

Let Us Help You:

  • Establish a world-class Security profile
  • Reduce the time and expense of managing internal infrastructure
  • Ensure compliance with HIPAA through HITRUST certification

HIPAA-Compliant Cloud Hosting

Evolve IP’s PHI-5 cloud hosting solutions help health care providers and other industry-related service providers establish and maintain a HIPAA-compliant infrastructure.

Evolve IP’s managed disaster recovery solutions provide the ultimate in business continuity and protection against malicious malware, ransomware and denial of service attacks. Our virtual private cloud solutions combine planning, expertise, and technology to provide the industry’s highest degree of security, recoverability and peace of mind.

A Team You Can Count on for Business Continuity

Evolve IP offers several “managed service” approaches to disaster recovery (DR) that provide reliable, secure, and expedient protection for on-premise systems. Clients may opt to protect their virtual systems in either our Valley Forge, PA or Las Vegas, NV datacenters. There are several options available in terms of recovery time objective (RTO) and recovery point objective (RPO). The key difference between our various offerings is in the manner by which the protected client data is transmitted to the datacenters. Each solution offers clients:

  • Unmatched security in Evolve IP’s virtual private cloud
  • Geographic redundancy, offering protection against regional events or power outages
  • A response team that stands ready to assist you through a recovery in the event of a disaster or data emergency 

Disaster Recovery Options Include:

Managed Disaster Recovery – Backups are stored on premise in on Evolve IP’s propriety SmartFrame backup appliance and also replicated to the selected Evolve IP datacenter.

Nimble-to-Nimble Disaster Recovery – Customers who are currently utilizing Nimble Storage devices can take advantage of Evolve IP’s Nimble-to-Nimble DR capabilities.

Evolve IP Veeam Cloud Connect DR – Evolve IP offers disaster recovery services through Veeam which create server-level replicas to Evolve IP’s secure datacenter and leverages resources from the Evolve IP managed hosting team.

With healthcare firms under constant attack, reliable, frequent backups are essential protection for PHI and system availability. Evolve IP’s backup and replication solutions create frequent backups that are instantaneously secured offsite — isolated and protected from potential contamination, and ready to bring your business back to life.

Reliable and frequent backups are critical to any enterprise infrastructure.

That’s why Evolve IP offers multiple options and service levels to ensure virtual server protection.  Clients may choose to replicate their backups to either our Valley Forge, PA or Las Vegas, NV datacenters to ensure geographic disparity.  Additionally, local backups may be made available.

Evolve IP currently offers three Data Backup and Offsite Replication Options:

  • Prem Xtend™ Backup and Offsite Replication – Utilizing a SmartFrame onsite appliance,Evolve IP will perform hypervisor-based backups of virtual systems. These backups are retained locally on the SmartFrame and can be recovered back into a client’s infrastructure.
  • Nimble-to-Nimble Backup – For customers who are currently utilizing Nimble Storage devices,Evolve IP offers fast reliable offsite backups using Nimble to Nimble storage replication.
  • Veeam Backup Solutions – Evolve IP offers a variety of powerful backup solutions based on Veeam Software technology. We can build a customized backup program from the ground up based on our Prem Xtend™ backup solution offering or extend your current use of Veeam into the cloud with Veeam Cloud Connect.

Contact us and we’ll provide you with a valuable technology assessment – free of charge! In just hours we can determine the health and efficiency of your IT infrastructure, identify potential risks and capacity shortfalls, and detect configuration issues that might impact overall application performance. You’ll walk away with recommendations to optimize your environment and deliver higher quality healthcare.

Recognizing the time and resource challenges that businesses face, Evolve IP has developed a fast, easy-to-execute analysis that helps IT managers collect valuable information about their infrastructure.

You can now conduct a comprehensive automated assessment of your environment – including all on-premise and hosted components – that can be initiated in less than 15 minutes. The powerful results – including a detailed, server-by-server infrastructure discovery report and written analysis – are available for your review and use within days. The immediate benefits are actionable metrics regarding your environment and invaluable performance details that empower you to:

  • See specific cost-saving opportunities
  • Capture a holistic view of infrastructure performance
  • Identify optimization opportunities
  • Establish a statistical baseline for building your future road map

Ultimate Guide to Ransomware

HITRUST & Evolve IP

The Health Information Trust Alliance (HITRUST) has established the HITRUST CSF, a certifiable framework that can be used by any and all organizations that create, access, store or exchange personal health and financial information.