Northstar

Home / Security

Built With HIPAA Safeguards From the First Login

These are the protections built into Northstar today.

The Safeguards Built Into Northstar

Each of these is part of how Northstar works today, for every staff member who signs in.

  • Multi-Factor Sign-In

    Every staff login requires multi-factor authentication: a password plus a second check.

  • Append-Only Audit Log

    Activity is recorded in an audit log that entries can be added to but not edited or deleted.

  • Per-Patient Chart Access

    Access to charts is controlled patient by patient, so people see the records their work requires.

  • Role-Based Permissions

    What each person can do depends on their role, such as front desk, billing or leadership.

  • Encrypted Sessions

    Sessions between your browser and Northstar are encrypted.

  • Step-Up Checks for Sensitive Areas

    The executive dashboard asks for a fresh multi-factor check before it opens.

  • Staff Account Management

    Practice administrators manage staff accounts, so access can be removed when someone leaves.

HIPAA's Technical Safeguards

The HIPAA Security Rule lists technical safeguards for electronic protected health information (ePHI): access control, audit controls, integrity, person or entity authentication, and transmission security.1 Northstar is built with safeguards in those areas, including per-patient and role-based access, an append-only audit log, multi-factor authentication and encrypted sessions.

Oncology records hold some of the most sensitive information in medicine, from diagnoses to treatment plans. We encourage every practice to walk through security in detail with any vendor it evaluates, including us.

This Website Doesn't Collect Patient Information

Please don't send patient information through this site or by email. When you request a walkthrough, we only need your name, your practice, and how to reach you.

Have security questions for your review? We're glad to walk through them with you.

Request a Northstar Walkthrough

Sources

  1. 45 CFR 164.312, Technical safeguards. Electronic Code of Federal Regulations.

Page last updated