Amazing backup utility starting at $15.00 a month.

Protect your Patients and your Practice with Offsite Backup.

HIPAA Compliant
SAS 70 Certified
256 Bit AES Encryption
Multiple Backup Sites

Data Storage

With Datacenters on the East Coast and West Coast Data is always ready.

Cost Effective

Yes, other backup utilities are cheaper. We offer a monitored system. If there are issues we take care of them for you.

Plugin Compatible

With MS SQL, Exchange, Office, and Outlook Plugins we have everything covered.

A Complete Package

With HIPAA Bank you can rest easy knowing your Data is just a click away in your time of need.

Choose your Plan

Basic PlanMinimal Data

$1500per month

Unmanaged
1 PC's
2 GB Storage
MS SQL Plugin
No MS Exchange Plugin
No MS Office Plugin
No MS Outlook Plugin
Revision Rules Plugin
Phone & Email Support

Data PlanOur Best-Selling Plan

$3000per month

Managed
Unlimited PC's
10 GB Storage
MS SQL Plugin
MS Exchange Plugin
MS Office Plugin
MS Outlook Plugin
Revision Rules Plugin
Phone & Email Support

Data + Files Plan Large Amounts of Data

$5000per month

Managed
Unlimited PC's
20 GB Storage
MS SQL Plugin
MS Exchange Plugin
MS Office Plugin
MS Outlook Plugin
Revision Rules Plugin
Phone & Email Support

Server PlanPC Backups

$10000per month

Managed
Unlimited PC's
50 GB Storage
MS SQL Plugin
MS Exchange Plugin
MS Office Plugin
MS Outlook Plugin
Revision Rules Plugin
Phone & Email Support

Ultimate PlanBackup for everything

$17500per month

Managed
Unlimited PC's
100 GB Storage
MS SQL Plugin
MS Exchange Plugin
MS Office Plugin
MS Outlook Plugin
Revision Rules Plugin
Phone & Email Support

Have Questions to ask?

Why should we use an offsite backup service? What is the point?

No matter the size of your practice, your data is the most valuable asset. Think about it:
What would you do without your patient or financial records?
How long could your practice survive without access to the information you rely on every day?
The answers to these questions are not pleasant yet many healthcare facilities don’t have an offsite backup plan in place for their data. There are a variety of possible threats to the data stored locally at your practice, including hard drive crashes, theft, computer viruses, software corruption, natural disasters, and even human error.
Our HIPAA compliant offsite backup service will protect your data in the event of a disaster and have your practice up and running in a couple of hours.
Fact: The ramifications of a major data loss are so great that most companies that have the misfortune to experience it don’t survive more than six months.

We backup up our data to an external hard drive, is this good enough?

Some people backup their personal data (such as music or photos) on CDs or external hard drives. While this is great for your home, a healthcare facility needs a much more secure and compliant method with scalable capabilities.
Backing up your patient data to an external hard drive or CD is not HIPAA compliant because it is not encrypted.
Oh, and this still doesn’t solve the problem of potential theft, damage, or natural disaster.

HIPAA Bank will Manage and Monitor my offsite backup, can you explain the value?

Of course, there are a lot of generic offsite back up companies out there, you may have heard of some of them. The main difference between HIPAAank and those other companies is this:
With them, you’re buying a generic product that you’ll have to manage yourself.
With us, not only are you getting a product designed for the healthcare industry, but you’re getting a service as well.
The words "managed and monitored" add a lot of value to our offsite backup solution. Not only do we implement and set up your offsite backup for you but our IT experts are constantly monitoring your systems to make sure that your data is protected at all times.

HIPAA Bank's offsite backup is HIPAA compliant, what does that mean and why should I be concerned?

Patient privacy has become a major topic of concern over the past several years. Prior to the institution of the Health Insurance Portability and Accountability Act ("HIPAA") by Congress in 1996, there were no universal standards set in place to identify whether or not a healthcare provider was properly securing patient information.
HIPAA was designed to reduce the administrative costs of healthcare, to promote the confidentiality and portability of patient records, to develop standards for consistency in the health care industry, and to provide an incentive for electronic communications. With these standards in place, organizations better protect their systems, and patients can feel confident that their personal medical information will remain private.
Virtually all healthcare organizations are affected by the HIPAA standards. This act applies to any health care provider, health plan or clearinghouse (collectively "Covered Entities") that electronically maintains or transmits health information pertaining to patients. The Security Rule requires health care providers to put in place certain administrative, physical and technical safeguards for electronic patient data. Among other things, Covered Entities will be required to have a Data Backup Plan, a Disaster Recovery Plan, and an Emergency Mode Operation Plan.
Why should your organization be concerned with this compliance? Simply put, every patient cares about the privacy and integrity of their health information. By complying with HIPAA standards, you can prevent security breaches to maintain trust in your customers as well as avoid financial loss.
What happens to organizations that do not secure their electronic protected health information (EPHI)? HIPAA is now the law and carries serious penalties for non-compliance. Civil penalties are $100 per violation, up to $25,000 per year for each requirement violated. Criminal penalties range from $50,000 in fines and one year in prison up to $250,000 in fines and 10 years in jail.

Where will our data be stored? It is sensitive and I want to make sure it is safe.

We understand that you want your data to be stored in a safe place.
Your data is stored (in encrypted form) in two, Tier-4, SAS70 Type 2 certified, online data backup centers. These data centers are located hundreds of miles apart from each other in order to prevent data loss from natural disasters.
Each data center has 24/7 monitoring and advanced security measures such as biometric controlled access as well as backup generators and redundant connections to the Internet.
Rest assure, your data will be there when you need it.

You have a SAS 70 data center, so what does that mean for my practice?

What is SAS 70?
SAS 70 is an accounting standard developed by the American Institute of Certified Public Accountants. During an audit, a third-party will evaluate a service organization’s internal controls and security standards. When an independent auditor conducts the review, they verify that the proper operational controls, procedures, and risk assessments are in place.
SAS 70 audits controls over information technology and processes related to sensitive data, such as health information and personally identifiably information.
The audit process is ongoing; third-party evaluations are regularly scheduled to ensure continued compliance.
Why is SAS 70 important?
SAS 70 is recognized as one of the most stringent auditing standards for service organizations. A successful audit verification ensures that the company has well-designed and effective controls in place to ensure the accuracy of transactions and privacy of the data being stored and transmitted.
Organizations which provide services to healthcare companies are often asked by their clients to have a SAS 70 audit conducted to ensure that an independent party has examined the controls over the processing of sensitive healthcare information.
A SAS 70 certification is used by customers, prospective customers, and investors to gain an understanding of the control environment of outsourcing companies.
Who is certified?
Not all service providers are SAS 70 certified. With our company, you can be assured that your heathcare data is both safe and secure now and in the future.

How will our data be transfered to the offsite servers? Is this secure?

In addition to the 256 Bit AES encryption, the software communicates with the backup servers using SSL (Secure Socket Layers) technology. This is the same encryption technology used by Internet browsers when a user enters a secured site such as an online bank.
As a result, the online backup of data is encrypted twice!
It is encrypted at all times using the 256 bit AES encryption, and it is encrypted again while it’s being sent over the Internet.
Sound secure?

256 Bit AES encryption... what are you talking about?

HIPAA Bank is a secure online data backup which encrypts each file using 256 bit AES encryption technology. When you first install and configure HIPAA Bank software, you will choose a 48 character string that will then be converted into a 256 bit encryption key that only you will have access to. It will never be transmitted over the Internet and it is never stored on our servers. This means that only you can access your online backup files. Each file that you backup is encrypted using this key and remains encrypted until you restore it and it returns to your computer.
How strong is 256 bit AES encryption? Well, let’s put it this way. In June 2003, 256-AES was approved by the United State’s National Security Agency (NSA) for use encrypting the U.S. government’s documents classified "TOP SECRET."
Does this help you understand how seriously we take your data?

HIPAA Bank is here to help ease your mind about your data. No more sleepness nights worrying if your disaster recovery plan is in place.

If you still have questions, please contact us by telephone 405.321.5356 or by our contact page.

Our Datacenters are located in Boston and in Washington State. This insures that a Natural Disaster will most likely not affect your Data.

What our Clients say:

I have been using HIPAA Bank for a few months and have had to rely on them to restore my data after my server crashed. This was easy and didn't take long at all.

Thomas Smithhttp://normansprofessorpc.net

After losing our data due to a fire we have used this service. Whenever we end up shutting down our systems at night we have messages informing us that our backup did not run for that day. Great monitoring!

Adam Maddoxhttp://somesitesomewhere.us