Who can use this feature?
Available on Enterprise plans.
All members.
Tip: The acronym, PHIPA, stands for "Personal Health Information Protection Act, 2004" - Ontario, Canada's health-sector privacy law (S.O. 2004, c. 3, Sched. A). It governs how health information custodians (HICs), such as hospitals, clinics, and individual practitioners, collect, use, and disclose personal health information (PHI). PHIPA is sometimes confused with HIPAA, the U.S. health privacy law - they are separate laws with different requirements. PHIPA is overseen by the Information and Privacy Commissioner of Ontario (IPC).
How PHIPA compliance works
PHIPA has no government certification scheme for vendors. (HIPAA doesn't have an official government certification either, in both cases, compliance is demonstrated through safeguards, agreements, and, where applicable, independent third-party attestations.) Under PHIPA, responsibility for compliance sits with the health information custodian. A service provider like Alohi supports your PHIPA obligations by acting as your electronic service provider under a written agreement and by applying robust administrative, physical, and technical safeguards to your data.
In practice that means two things on our side: enabling the Advance Security Controls on your account, and entering into a written agreement that sets out how your personal health information is handled.
Does Sign.Plus support PHIPA compliance?
Yes - Sign.Plus can support your organization's PHIPA obligations, provided you activate Advanced Security Controls and enter into a written agreement with Alohi.
We have reviewed the administrative, physical, and technical safeguards needed to protect personal health information (PHI) and electronic personal health information, helping make Sign.Plus a strong fit for organizations subject to PHIPA.
Learn more in our Trust Center.
Does Fax.Plus support PHIPA compliance?
Yes - Fax.Plus can support your PHIPA obligations on the Enterprise plan only, once you activate Advanced Security Controls and enter into a written agreement with Alohi.
These options are not available on the Free, Basic, Premium, or Business plans. If you handle personal health information, you'll need an Enterprise plan before they appear.
We have reviewed the administrative, physical, and technical safeguards needed to protect personal health information, helping make Fax.Plus a strong fit for organizations subject to PHIPA.
Learn more in our Trust Center.
A note on data residency
PHIPA does not require personal health information to be stored in Ontario or Canada. Because the Act applies to health information custodians operating in Ontario, the custodian remains responsible for protecting PHI wherever it is stored or processed.
That said, where your data is stored is often an important practical and contractual consideration for organizations handling PHI. You can review our Data Residency options to see what's available on Enterprise plans.