Security & Compliance
Built for healthcare and secure facilities. Designed with security, privacy, and compliance at the core.
Compliance & Security Standards
Spektr products are built to support your compliance requirements
HIPAA Compliance & BAAs
Built for healthcare environments. We sign Business Associate Agreements with covered entities and implement required safeguards to protect ePHI. See detailed HIPAA section below.
Data Security
Industry-standard encryption for data in transit and at rest. Secure authentication, role-based access controls, and comprehensive audit logging to protect your information.
Audit Trails
Complete audit logging across all Spektr products. Track who accessed what, when, and from where. Essential for compliance reporting and security investigations.
Data Privacy
Your data is yours. We don't sell or share your information. Clear data ownership, transparent privacy practices, and respect for your organization's confidentiality.
Access Controls
Granular role-based permissions ensure users only see and access what they need. Protect sensitive information while maintaining operational efficiency.
Our Security Practices
We take security seriously. Here's how we protect your data:
HIPAA & Business Associate Agreements
Business Associate Agreements (BAAs)
If your organization is a HIPAA-covered entity (such as a hospital, healthcare provider, health plan, or healthcare clearinghouse) or a business associate handling protected health information, Spektr Technology will sign a Business Associate Agreement (BAA) with you.
The BAA establishes our legal commitment to:
- Implement appropriate safeguards to protect ePHI
- Report any security incidents or breaches as required by HIPAA
- Ensure our subcontractors (if any) also agree to the same restrictions and conditions
- Make ePHI available to individuals as required under HIPAA
- Return or destroy ePHI upon termination of the agreement
HIPAA Safeguards We Implement
As a business associate, Spektr implements the required administrative, physical, and technical safeguards mandated by the HIPAA Security Rule:
Administrative Safeguards
- • Security management processes and risk analysis
- • Workforce security and training
- • Security incident procedures
- • Contingency planning and disaster recovery
Physical Safeguards
- • Secure data centers with controlled access
- • Workstation and device security
- • Physical access controls and monitoring
Technical Safeguards
- • Access controls and unique user identification
- • Encryption of data in transit and at rest
- • Audit controls and activity logging
- • Automatic logoff and session management
Covered Entities & Business Associates
Covered entities include healthcare providers, health plans, and healthcare clearinghouses that transmit health information electronically. If you're a covered entity, you must have a BAA in place with any business associate that handles ePHI on your behalf.
Business associates are entities that perform services for covered entities involving the use or disclosure of ePHI. When you use Spektr products to handle any protected health information, Spektr becomes your business associate, and we'll execute a BAA to formalize our HIPAA compliance obligations.
Your Data, Your Control
Data Ownership: You own your data. Period. We're simply the custodian of the infrastructure that stores and processes it.
Data Portability: You can export your data at any time in standard formats. No lock-in, no complications.
Data Deletion: When you close your account, your data is securely deleted according to our retention policies and your requirements.
Transparency: We're transparent about how we handle data, where it's stored, and who has access. No surprises, no hidden practices.
Note: While Spektr products are designed to support compliance efforts, ultimate compliance responsibility rests with each organization. We recommend consulting with your compliance and legal teams to ensure our products meet your specific regulatory requirements.