Sage Portal
 
Sophrona Solutions, Inc.
855 Village Center Drive
#329
North Oaks, MN  55127
 
tel. 800.608.6017
fax. 612.643.3555

| | Security |

Privacy & Security

Sage Portal’s comprehensive security features do more than prevent unauthorized access and protect confidential patient data. They fully meet HIPAA security and privacy regulations as well as meeting the Payment Card Industry Data Security Standard (PCI-DSS).  This set of stringent requirements is set by the Payment Card Industry, led by MasterCard and Visa.  In addition to meeting PCI-DSS requirements, PCI Certifications involves periodically subjecting Sophrona systems to vulnerability scans that are akin to automated hacking attacks to ensure the systems remain secure.

 

HIPAA Secure

  • HIPAA Compliant
  • 128-bit Encryption
  • Secured data center

How can I check if my site or online communication is secure?

PCI Certified

  • MasterCard & Visa's Security Standard
  • PCI-DSS Requirements
  • Regular Vulnerability Scans

Press Releases:

HIPAA Compliance Program

Sophrona Gets Payment Card Industry Certification (Yahoo)

Secure access for the patient and for clinic staff

  Each Sage Portal user has a unique user name and password. Authentication information for each patient user is encrypted and stored securely. Use of patient secret questions allows for automated secure re-assignment of patient passwords.

SSN Privacy

  Clinic determines if SSN will be required, optional, or not asked at all for patient registration.
 

Clinic access to data based on role and location

  While Sage Office Portal users can access the system from browser based computers anywhere, data access is controlled by user groups at the application level. Management assigns users to configurable user groups that determine their level of access to different clinical functions (e.g. schedulers only have access to appointment information, business office has access to payment and demographic information, etc.)
 

Recording and enforcing patient consent

  Patients must agree to patient portal user license agreement and to clinic terms to use portal.
 

Inactivity Time-Out

  After a pre-defined period of inactivity within Sage Portal or Sage Office Portal, a user will be automatically logged out. This minimizes the risk of unauthorized system access after a user walks away from his or her computer. For certain time intensive activities that require thought, pop-up timers will ask user if they want more time in order to avoid time-outs.
 

Full Audit Log

  All Sage Office Portal clinic staff user activity is tracked and recorded in a permanent audit log. Sign-ons, sign-outs, applications used, and patient information viewed are all recorded.
 

Secure Verifiable Payment Gateway

  Payment gateway security is always verifiable to patient.

 

 

To request more information, Contact Us 

 

 
This web site best viewed at 800 x 600 resolution. Sophrona Solutions, Inc. © 2003-2011. All Rights Reserved.