Compliance

HIPAA and HITECH Compliance

The HITECH Act and related federal interoperability programs promote the secure exchange of electronic health information across the U.S. healthcare system. Connected Mind® is designed to support covered entities and healthcare organizations that need secure behavioral health screening workflows, protected health information controls, and interoperable result delivery.

When Connected Mind® creates, receives, maintains, or transmits protected health information (PHI) on behalf of a healthcare customer, we operate as a business associate under our customer agreements and support HIPAA-aligned administrative, technical, and operational safeguards.

Connected Mind® is built around the protection of PHI and the security of electronic health data. The platform supports secure behavioral health screening, controlled access to reports and clinical workflows, C-CDA and report-generation workflows, and secure delivery options configured for each customer's environment.

Platform Security

Connected Mind® uses authenticated portal access, role-based authorization, audit logging, and secure cloud infrastructure controls to limit access to customer data. Access to protected workflows is governed by assigned user roles and customer context, and security-sensitive actions are logged for review.

The platform supports modern sign-in flows, including email code and passkey-based authentication where enabled. Report, training, kiosk, and remote screening workflows are designed to use controlled access paths rather than open public access to protected data.

Interoperability and Delivery

Connected Mind® supports secure electronic exchange workflows, including C-CDA generation and delivery options such as secure Direct Messaging when configured for a customer. Available delivery paths depend on each customer's implementation, EHR configuration, and enabled platform features.

Business Associate Agreement

Business Associate Agreement (BAA) and security summary materials are available on request.

Security Officer

Christian Lehinger
Contact Security Officer

HIPAA Officer

Peggy Banks
Contact HIPAA Officer