Security & Compliance

HIPAA Compliance

We are committed to safeguarding the privacy, security, and integrity of Protected Health Information (PHI) in accordance with HIPAA.

At Zenexa Infotech Pvt Ltd, we are committed to safeguarding the privacy, security, and integrity of Protected Health Information (PHI) in accordance with the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and applicable regulations.

Our Commitment to HIPAA

Four pillars that guide our approach to protecting health information.

Privacy Rule

We limit the collection, use, and disclosure of PHI to what is permitted under HIPAA and only for authorized purposes such as healthcare coordination, insurance claims, or legal proceedings.

Security Rule

We employ administrative, physical, and technical safeguards — including encryption, access controls, audit trails, and secure transmission protocols — to protect PHI from unauthorized access, alteration, or loss.

Breach Notification Rule

In the unlikely event of a data breach involving PHI, we will promptly investigate, mitigate risks, and provide required notifications in compliance with HIPAA guidelines.

Business Associate Agreements

Zenexa enters into BAAs with covered entities (healthcare providers, insurers, law firms, etc.) to ensure compliance with HIPAA obligations.

Safeguards in Place

Technical, administrative, and physical measures that protect your data every day.

Encryption

All PHI is encrypted at rest and in transit using AES-256 and TLS 1.3.

Access Control

PHI access is role-based and restricted to authorized personnel only.

Employee Training

All employees handling PHI undergo regular HIPAA and data protection training.

Continuous Monitoring

System activity is logged and monitored to detect and prevent unauthorized access.

Data Minimization

We collect and process only the minimum necessary PHI to fulfill service requests.

Incident Response

Documented procedures for breach detection, containment, notification, and remediation.

Your Rights Under HIPAA

Individuals whose PHI we handle retain the following rights under HIPAA:

Access and obtain a copy of their health information
Request corrections to inaccurate or incomplete records
Request restrictions on certain uses or disclosures of their PHI
File a complaint if they believe their rights under HIPAA have been violated

Questions or Concerns?

Contact our HIPAA Compliance Officer for any questions about our compliance practices.

compliance@zenexainfotech.com
Last updated: March 6, 2026