Exciting News: PCIT Tracker & HIPAA Compliance Update!
PCIT Tracker has completed its transition to AWS and implemented the safeguards needed to confidently offer a fully HIPAA-compliant platform, including Business Associate Agreements for organizations that store PHI.
From the very beginning, protecting clinician and family data has been one of our highest priorities.
As we built PCIT Tracker, we followed HIPAA best practices as closely as possible and designed the platform with security and privacy in mind. As a small software company, however, implementing every safeguard needed to confidently state that we were fully HIPAA compliant required infrastructure that wasn't yet practical for us given the amount of financial resources required.
We're excited to share that we've now reached that milestone.
Our transition to AWS...
Over the past several months, we've transitioned PCIT Tracker to Amazon Web Services (AWS), which provides HIPAA-eligible cloud infrastructure for healthcare applications.
Moving to AWS did not make PCIT Tracker HIPAA compliant by itself. Rather, it gave us access to the secure infrastructure and services that allow us to implement the administrative, technical, and physical safeguards required for HIPAA compliance at a reasonable price.
After completing this transition and implementing those safeguards, we are now elated to confidently share that PCIT Tracker is fully HIPAA compliant.
This is an important milestone for us and one that reflects our ongoing commitment to protecting clinician and family data.
Business Associate Agreements (BAAs)
Because PCIT Tracker is currently fully HIPAA compliant, we're happy to enter into a Business Associate Agreement (BAA) with your clinic or organization if you plan to store Protected Health Information (PHI) within the platform.
We know many organizations require a signed BAA before using any software that stores PHI, and we're excited to collaborate in that process. If your organization would like to discuss a BAA, we'd be happy to help! Please reach out or read our HIPAA & BAA details.
Using PCIT Tracker without sharing PHI...
Of course, storing PHI in PCIT Tracker is completely optional!
Many clinicians prefer to use initials, participant IDs, or other de-identified information, and PCIT Tracker will continue to fully support that workflow. If you and/or your clinic prefer not to store PHI in the platform, you can absolutely continue using PCIT Tracker that way.
Our goal is not to require more information. Rather, it's to give clinicians and organizations the flexibility to choose the workflow that best fits their privacy policies and comfort level.
Looking ahead...
One of the most exciting parts of this milestone is what it makes possible moving forward. As we continue developing PCIT Tracker, we'll be able to explore new features that involve limited, thoughtfully managed PHI while remaining committed to collecting only the information that's truly necessary.
For example, we've begun discussing features like securely emailing homework sheets directly to families, allowing clinicians to share personalized materials more efficiently without adding extra administrative work.
As always, we'll approach these ideas carefully, with privacy and security guiding every decision we make.
Thank you to everyone who has supported PCIT Tracker as we've continued to grow. Every improvement we make is driven by our mission of helping clinicians spend less time on paperwork and more time doing what matters most: working with families! We're excited for what's ahead. If you have any questions or ideas that you're willing to share, please reach out to us!