Focus on positive health outcomes, not paperwork

Docusign for healthcare FAQs

• Is Docusign HIPAA-compliant?

  Docusign products are designed to enable and support our customers in meeting their compliance obligations. A company's products, including Docusign’s, cannot be HIPAA compliant. HIPAA applies primarily to covered entities that handle private health information. Docusign may enter into a Business Associate Agreement (BAA) with a HIPAA Covered Entity and in these scenarios Docusign agrees to meet HIPAA Business Associate obligations. Learn more about Docusign HIPAA compliance.

• How does Docusign facilitate customers with HIPAA compliance obligations?

  Docusign is committed to helping its customers comply with HIPAA requirements. To achieve this, Docusign offers a BAA and employs a comprehensive set of security measures to protect customer data. These measures include:
  - Information security program: Docusign maintains an information security program that meets ISO 27001 standards.
  - Industry certifications: The company holds multiple industry certifications, including ISO 27001 and Payment Card Industry Data Security Standard (PCI DSS). It also produces SOC 1 and SOC 2 reports annually and is a FedRAMP-authorized cloud service provider.
  - Access and network security: Docusign uses centralized access management and a defense-in-depth approach to secure its network.
  - Secure development: The company follows a formal software development lifecycle with secure coding practices and performs regular code reviews, vulnerability scans, and penetration tests.
  - Data protection: Customer data is stored in secure data centers, and Docusign uses encryption technologies and industry-recognized processes for data retention and disposal.
  - Privacy by design: Product architectures are designed with privacy in mind, supporting data residency features.
  - Transparency and audits: Docusign makes third-party attestations, certifications, and reports available upon request and publishes its policies for responding to governmental data requests.

• Is Docusign able to integrate with EHR systems?

  We have solutions to ensure a seamless workflow. Our APIs allow for custom integrations and we can connect you with EHR interoperability partners.

• What are the advantages of using the Docusign platform for healthcare organizations?

  Docusign IAM empowers healthcare organizations to transform agreements from administrative burden into catalysts for better patient experiences, empowered staff, and improved operational efficiency. By empowering staff with a single, extensible platform to manage all end-to-end agreement processes with unparalleled scale and trust, healthcare organizations see a 29% reduction in staff time per agreement, a 17% reduction in compliance incidents, and a 93% improvement in data quality, alleviating burnout and ensuring fewer administrative hurdles that detract from patient care. With an unmatched ecosystem of 1,000+ integrations and robust APIs, healthcare organizations can truly simplify complex administrative processes, alleviate staff burnout and turnover, ultimately make it easier for providers and patients to focus on what truly matters: achieving positive health outcomes.