Sub-business Associate

Eagle Software Group, Inc. is a sub-business associate. Eagle develops health care information systems for our customers, who are Business Associates and, in turn, provide such systems to Health Care Providers.

Personnel Policy

All Eagle personnel that come into contact with Private Health Information (PHI) are required to sign a confidentiality agreement, assuring that such data will not be disclosed.

Data Policy

All Private Health Information that is received by Eagle, in the course of providing technical support to our Business Associates, is immediately de-identified, or is stored in a secured safe location.

Subcontracting Policy

Eagle Software Group executes HIPAA Agreements with its Business Associates, which state that Eagle will comply with all relevant HIPAA requirements, in the course of developing health care information systems.

Operational Policy

Eagle Software Group uses acceptable levels of encryption and passwords to protect PHI that is stored on Business Associates' systems, in cases where Eagle operates such systems on behalf of our Business Associates.

HIPAA Compliance Statement

Eagle Software Group, Inc. has reviewed the HIPAA Requirements (45 CFR Parts 160, 162, and 164) of February 2003 and has developed policies and procedures to ensure that Eagle is compliant, in the role of sub-business associate. Eagle has policies and procedures in place to ensure the protection of the integrity and confidentiality of any Private Health Information within Eagle's possession.

During the normal course of operations, Eagle does not maintain active Private Health Information. Eagle may take possession of Private Health Information in the course of providing technical support to our customers, and in performing backups of customer's systems.

Eagle is committed to compliance with all relevant HIPAA requirements.