HIPAA compliance

HIPAA Compliance

Our solution is fully HIPAA compliant.

Specializing in HIPAA-compliant payment processing software

Health Insurance Portability and Accountability Act (HIPAA) regulates the disclosure of individuals’ health information, also called protected health information (PHI). According to the standards set forth by the U.S. Department of Health and Human Services, PHI covers all “individually identifiable health information,” which specifically includes demographic information such as name and address, as well as credit card numbers. Any piece of information that can be traced back to an individual is subject to HIPAA regulations.

Organizations that violate HIPAA are faced with massive fines. Every business that is associated with patients must be aware of HIPAA compliance, because a violation can be as simple as sending a payment receipt to the wrong person.

Rectangle Health specializes in HIPAA-compliant payment software and payment data security for healthcare organizations.

We keep PHI safe by storing all patient payment data in a secure, encrypted vault that is protected by layers of industry-leading, state-of-the-art technology. Sensitive information is not held on your premises or stored on your servers or computers.

We give our clients the peace of mind that their payment transactions are PCI and HIPAA-compliant.

Address Verification System

An Address Verification System (AVS) confirms the validity of credit card information entered during an online transaction by comparing the payer’s billing address to the address on file at the card’s issuing bank. 

Point-to-Point Encryption

Our point-to-point encryption (P2PE) solution protects your organization from data theft. P2PE encodes payment card data from the moment the card is used until it reaches the payment processor, making it unreadable to third parties.


Our card-on-file solution within Practice Management Bridge uses tokenization to turn stored card numbers into tokens – randomly generated sets of numbers that are meaningful only to the card processor.

Fraud Monitoring

Trained risk management experts monitor transactions on a regular basis, so that safety and security is upheld and any instance of fraud is detected.

A significant portion of provider revenue —more than 9 percent of patients — was vulnerable to loss in 2020 due to poor customer experiences.1

1Of 2,000 patients surveyed in The Healthcare Payment Experience, January 2021, produced by PYMNTS.com and Rectangle Health.