New: sample results from the ShieldAI case study are out now. Read the case study

Home · Legal · HIPAA

Legal

HIPAA Notice

How SCALE Healthcare approaches protected health information (PHI) when we act as a business associate to healthcare customers.

Last updated: August 12, 2026

Role

SCALE provides technology-enabled RCM and related services to covered entities and their business associates. When we create, receive, maintain, or transmit PHI on a customer’s behalf, we do so as a business associate under HIPAA and the HITECH Act, subject to an executed Business Associate Agreement (BAA).

Website vs. services

Public SCALE websites are for marketing and business contact. Do not submit PHI (including patient identifiers, claim details, or clinical information) through public forms, chat widgets, or unsecured email. PHI should only be exchanged through approved secure channels defined in your engagement and BAA.

Safeguards

In customer environments we support administrative, physical, and technical safeguards consistent with our security program and contractual commitments, which may include:

  • Access controls, authentication, and workforce training
  • Encryption in transit and at rest for systems in scope
  • Monitoring, logging, and incident response procedures
  • Vendor management for subprocessors that handle PHI
  • US-based infrastructure options as described in customer agreements (including commitments regarding offshore access where contractually specified)

Uses and disclosures of PHI

We use and disclose PHI only as permitted by the BAA and applicable law - typically to perform contracted services, for proper management and administration, and as required by law. We do not use PHI for independent marketing.

Breach notification

If we discover a breach of unsecured PHI, we will notify the affected customer without unreasonable delay and within the timelines required by the BAA and HIPAA breach notification rules.

Individual rights

Patients generally exercise HIPAA rights (access, amendment, restrictions, accounting of disclosures) through their provider or health plan. If you are a patient seeking records, contact your healthcare organization directly. If you are a customer privacy officer, contact your SCALE account team or info@scale-healthcare.com.

Related policies

See also our Privacy Policy, Security & compliance overview, and Terms of Use.

Contact

Questions about this policy: info@scale-healthcare.com(332) 282-1932 · 750 Lexington Ave, New York, NY 10022. Or visit our Contact page.