Information Security

OpiSafe is a product of RxAssurance, a company that has designed products over the years with a priority of security and privacy. Our experience architecting safe and secure software platforms spans more than two decades. In that time, we have learned that the best security is achieved through meticulous planning and execution.

HIPAA Compliance
OpiSafe is HIPAA and HITECH compliant. Our suite of products utilize a service-oriented architecture which is designed to isolate PHI (protected health information) to restricted APIs. We maintain compliance with government security standards for data transmission and storage.

Data Encryption
Any data that OpiSafe stores, collects or transmits to providers goes through 128-bit encryption. SSL encryption for APIs, web apps and mobile transactions and TLS encryption for email communications keep all information transmitted between OpiSafe and end users secure.

Audit Reports and Cerifications

• SSAE 16 / ISAE 3402 (formerly SAS70 Type II) Audit Reports
• Safe Harbor Self-Certification
• ISO 27001 Certification
• CDSA Certification
• SOC2 Data Centers in Security & Availability Report
• SOC3 Data Centers in Security & Availability Report