Compliance
Compliance and security.
How EHO360, LLC protects data, the policies we publish, and who to contact with a compliance question.
Privacy and security
How we protect data.
-
Risk AssessmentAnnual HIPAA Security Risk Analysis and Enterprise Risk Assessment, covering operational, financial, and technology risk.
-
Data MinimizationWe store only the data needed to adjudicate pharmacy claims under NCPDP standards. No lab results, medical images, or clinical notes.
-
AccessMulti-factor authentication on email, remote access, end-user computers, and every administrator account.
-
EncryptionSensitive data, including protected health information, is encrypted in transit and at rest.
-
MonitoringA suite of operational and security monitoring tools, including 24/7 managed detection and response.
-
Backups and RecoveryContinuous, encrypted backups, with snapshots sent offsite every minute. Regularly tested backup data and disaster recovery plan.
-
Agreements and TrainingBusiness Associate Agreements with clients and vendors, supported by vendor management and monitoring. Mandatory security training for all workforce members.
Security and compliance documentation is available to clients and regulators on request: compliance@ehorx.com
Published policies
Policies we publish under state requirements.
- Generic Drug Pricing Dispute Appeal Process
- Generic Drug Pricing Complaint Resolution
- Generic Drug Pricing List Access
- National Drug Pricing Compendia for MAC Determination
- Generic Drug Pricing Updates and Pharmacy Notification
- Generic Drug Pricing Compliance
- Non-Formulary Drug Exceptions
- Kentucky: KRS 304.17A-162 Compliance
Secure file transfer
Exchange files securely.
Request a connection
Clients exchange files with EHO over encrypted SFTP or a secure file transfer portal rather than email. For SFTP, start with the request form, and our team will set up your connection.
Public keys
EHO's public keys for SFTP connections and PGP-encrypted files.