HIPAA Compliance
ATHLYNX is fully compliant with the Health Insurance Portability and Accountability Act (HIPAA). We protect athlete health information with enterprise-grade security.
"Protecting Our Precious Cargo"
Your health data is sacred. We treat it that way.
Security Features
Data Encryption
All PHI is encrypted at rest (AES-256) and in transit (TLS 1.3)
Access Controls
Role-based access with multi-factor authentication required
Audit Logging
Complete audit trails for all PHI access and modifications
Secure Infrastructure
HIPAA-compliant cloud hosting with BAA agreements
HIPAA Safeguards
Administrative Safeguards
- Security Management Process
- Assigned Security Responsibility
- Workforce Security
- Information Access Management
- Security Awareness Training
- Security Incident Procedures
- Contingency Plan
- Evaluation
- Business Associate Contracts
Physical Safeguards
- Facility Access Controls
- Workstation Use Policies
- Workstation Security
- Device and Media Controls
Technical Safeguards
- Access Control
- Audit Controls
- Integrity Controls
- Person or Entity Authentication
- Transmission Security
Business Associate Agreements
ATHLYNX maintains Business Associate Agreements (BAAs) with all third-party vendors who may have access to Protected Health Information (PHI). Our BAA partners include:
Breach Notification Policy
In the unlikely event of a data breach involving PHI, ATHLYNX will:
- Notify affected individuals within 60 days of discovery
- Report to the HHS Secretary as required by law
- Notify prominent media outlets if breach affects 500+ individuals
- Provide credit monitoring services to affected individuals
HIPAA Compliance Questions?
Contact our Privacy Officer for any HIPAA-related inquiries.