HIPAA Compliance Statement

The VisionTree Optimal Care™ system is compliant with the Health Insurance Portability and Accountability Act of 1996 ("HIPAA"). All HIPAA requirements and standards have been met for the sources and uses of data promulgated under the U.S. Department of Health and Human Services regulations (the "HIPAA Regulations").

All personnel have passed HIPAA compliance standards tests and the system is continually upgraded to ensure secure data exchange. The VisionTree Optimal Care™ system meets the highest research standards for human subject data and is very sensitive to participant confidentiality and consent. Security is always a high priority, not only to protect from data or hardware loss, but also to ensure confidentiality.

VisionTree Optimal Care™ is 128-bit SSL encrypted. Servers employ power-on and user passwords, virus protection, and battery backup systems in an SAS-70 compliant data center with restricted access to authorized maintenance through 24/7 biometric security measures. Operating System and security patches are current. Servers are constantly monitored for break-in attempts or other illegal activity. Personal data storage is maintained with scrambled, de-identified numbers. Therefore, if security is breached, no personal data are recognized or accessed.