Based on our research, Affise is not HIPAA compliant because it does not meet the requirements set by the U.S. Department of Health and Human Services (HHS) to safeguard protected health information (PHI).
Affise is a performance marketing and affiliate tracking platform that helps advertisers, networks, and agencies run, track, and optimize partner marketing campaigns. With Affise, organizations can manage attribution, reporting, and partner payouts while using tools for tracking and analytics. Our one-sentence HIPAA assessment. Affise is an adtech vendor and not positioned as a HIPAA-focused service, so it is not suitable for handling PHI in covered-entity scenarios.
No. Affise does not publish a business associate agreement on its privacy or legal pages, and we found no public statement that Affise will sign a BAA. Covered entities should treat Affise as a non-BAA vendor and avoid sending PHI to the service unless an executed BAA is obtained.
Affise’s e-privacy white paper and privacy materials describe commitments to data protection and list technical and organizational measures oriented toward adtech use cases and privacy laws such as GDPR and ePrivacy. Key controls and practices they describe include:
Affise does not sign a BAA, and as a result, is not HIPAA compliant. Covered entities should not send PHI to Affise unless an executed BAA is in place that clearly covers the intended PHI uses.
Paubox has developed a HIPAA compliant email and texting solution that makes it easier for providers to connect with their patients. It eliminates the need for third-party apps or logins, allowing patients to receive secure, encrypted texts and emails directly on their phones.
Learn more: HIPAA Compliant Email: The Definitive Guide
HIPAA sets national standards for protecting the privacy and security of certain health information. HIPAA protects the privacy and security of individuals’ health information and ensures that healthcare providers and insurers can securely exchange electronic health information. Violations of HIPAA can result in significant fines and penalties for covered entities.
HIPAA applies to covered entities, which include healthcare providers, health plans, and healthcare clearinghouses. It also applies to business associates of these covered entities. Business associates are entities that perform functions or activities on behalf of a covered entity and have access to PHI.
A BAA is a legally binding contract that establishes a relationship between a covered entity under HIPAA and its business associates. The agreement ensures the proper protection of PHI as required by HIPAA regulations.