Is a virtual mailbox safe for sensitive documents?
A virtual mailbox is physical permanent mailing address for you to receive all of your physical mail and packages. We scan the outside and inside of any packages received and send you an email notification of the delivered items. A virutal mailbox will manage all of your postal mail so you don't have to.
Do I need a HIPAA-compliant virtual mailbox
It's not required, you can always receive mail in your office and maintain HIPAA Compliance within your workspace. The benefit of a virtual mailbox is that there is no patient paper and all the information is digital and access-controlled.
What types of entities use HIPAA compliant virtual mailboxes?
Any company that holds patient health information must comply with HIPAA laws. If your company has access to any patient health information you must take strict care of patient health data.
Will Thatch sign a Business Associate Agreement (BAA)?
Yes, please email us at email@example.com to request a BAA agreement. Fill out the open fields, and sign it. Once you have that complete, please email the form to us at firstname.lastname@example.org and we will counter-sign within 24 business hours.
What Physical safeguards are in place at your facilities?
We do not work with 3rd parties like many other virtual mailbox companies that utilize coworking spaces and retail mailbox rental companies. All of our mail facilities include access controls, workstation security, device encryption, and emergency access procedures.
Would Thatch fall under the conduit excemption?
No, unlike the US Postal Service that transmits data, we open mail for our clients so we would be subject to HIPAA rules. Any virtual mailbox company would need to meet the same standards if they open / scan mail.
What happens to my data if I cancel my account?
Our accounts have no contract, so you can cancel at anytime. We follow HIPAA proper data disposal rules to delete all client data upon cancellation.
Do you offer a no storage option?
Yes, you can optionally request that we do not store any of your data past a certain amount of days so our system is completely wiped of patient data.
Still have questions about Thatch business mail? Get in touch