HIPAA Notice & Compliance Policy

Protecting Protected Health Information (PHI) is fundamental to our services. We are committed to maintaining the highest standards of HIPAA compliance, security, and confidentiality for every healthcare organization we serve.

Effective: July 30, 2026

Last Updated: July 30, 2026

At SwyftRevenue, maintaining compliance with the Health Insurance Portability and Accountability Act of 1996 (HIPAA), the HITECH Act, and the Omnibus Rule is central to everything we do. As a trusted Business Associate to healthcare providers, covered entities, and medical practices nationwide, we are committed to safeguarding Protected Health Information (PHI) and electronic Protected Health Information (ePHI).

1. Our Role as a Business Associate

Under HIPAA regulations, SwyftRevenue functions as a Business Associate (BA) when performing revenue cycle management, medical billing, coding, and claims processing services for Covered Entities (physicians, clinics, hospitals, and healthcare organizations).

We execute formal Business Associate Agreements (BAAs) with all covered entity clients prior to receiving or processing any patient data, establishing clear legal boundaries for data use, handling, and security.

2. Safeguarding Protected Health Information (PHI)

We implement rigorous physical, administrative, and technical safeguards designed to ensure the confidentiality, integrity, and availability of PHI.

A. Administrative Safeguards

Workforce Training: Every SwyftRevenue employee and contractor undergoes mandatory HIPAA compliance, data privacy, and security awareness training upon hire and annually thereafter.
Policies & Procedures: Strict operational guidelines governing data handling, password management, device security, and incident response.
Role-Based Access Control: Employees are granted access only to the specific PHI required to perform their designated revenue cycle functions under the "Minimum Necessary" standard.

B. Technical Safeguards

End-to-End Encryption: All ePHI in transit across public networks is protected using 256-bit SSL/TLS encryption. Data at rest is encrypted on secure, compliant servers.
Audit Controls: Advanced logging systems monitor access, modifications, and transfers of PHI to identify and prevent unauthorized activity.
Secure Communications: Claims submissions, eligibility checks, and payor communications occur over encrypted electronic data interchange (EDI) pathways.

C. Physical Safeguards

Facility Security: Secured facilities with keycard access, visitor logs, and perimeter surveillance.
Workstation Security: Automated workstation lockouts, clear-screen policies, and restriction of removable storage media (e.g., USB drives).

3. Permitted Uses and Disclosures of PHI

SwyftRevenue utilizes PHI solely to fulfill obligations defined in our agreements with Covered Entities, including:

Submitting claims to private payors, Medicare, and Medicaid.
Managing payment posting, denial mitigation, and patient billing inquiries.
Performing eligibility and benefit verifications.
Conducting internal quality control and administrative compliance audits.

We never sell PHI, nor do we disclose PHI to unauthorized third parties without explicit authorization or valid legal mandate.

4. Breach Notification Protocol

In the unlikely event of a security incident or unauthorized acquisition, access, use, or disclosure of unencrypted PHI, SwyftRevenue maintains a strict Breach Notification Protocol.

We will notify impacted Covered Entity clients without unreasonable delay and strictly within the timelines mandated by HIPAA regulations and applicable state laws.
We will collaborate fully with the Covered Entity to investigate, mitigate, and resolve the incident.

5. Subcontractors & Vendor Compliance

SwyftRevenue requires all subcontractors, software partners, clearinghouses, and vendors who interact with PHI to sign binding Business Associate Agreements and maintain security standards equal to or exceeding our own.

6. Contact Our HIPAA Compliance Officer

If you have questions regarding our HIPAA compliance protocols, wish to report a security concern, or require an executed Business Associate Agreement (BAA), please contact our Compliance Officer.

SwyftRevenue Compliance Office 30 N Gould St Sheridan, WY 82801 United States

Email: support@swyftrevenue.com LLC#: 2026-002025681