HIPAA Compliant Note Taking Apps
Listing 1 Result for “Note-Taking Apps”
Evernote doesn’t offer a Business Associate Agreement (BAA). Even though it incorporates some protection features that can prevent unauthorized access, the overall security controls aren’t sufficient to meet HIPAA standards. Evernote can only be used for medical data storage purposes if it’s completely offline and is going to stay offline. The computer that Evernote is set up on should be encrypted in order to prevent unauthorized personnel from accessing the information. Given that its primary purpose is file sharing, Evernote isn’t the ideal solution for handling PHI and shouldn’t be used to store PHI.