HIPAA Vault

Etica Inc. dba HIPAA Vault is a provider of managed cloud hosting and compliance services for organizations that handle protected health information. The company operates as a secure cloud and HIPAA compliance service provider with data centers located across the United States and a client presence in approximately 150 countries, supporting over 1,000 customers and managing tens of thousands of sites.

Services and Capabilities

• HIPAA-compliant managed hosting: provisioning and operation of isolated servers and virtual private clouds tailored for handling protected health information.
• Secure application hosting and platform management: managed WordPress hosting and general Linux/Windows hosting with automated snapshot policies, multi-regional encrypted backups, and integrity verification.
• Secure communications and file transfer: hosted encrypted email solutions (including managed Gmail/Office 365 integrations), sFTP server hosting, secure forms and secure faxing solutions.
• Backup and disaster recovery: daily and multi-regional encrypted snapshots, offsite backups, and procedures for rapid recovery.
• Security and compliance services: Business Associate Agreements (BAAs), penetration testing for external services, web application firewalls, and ongoing compliance verification.
• Onboarding and managed support: full provisioning, configuration, and 24/7 technical and compliance support for customers.

Industry Focus

• Healthcare providers and clinical practices: delivery of hosting and communication systems designed to meet HIPAA requirements, including secure patient data storage, encrypted email, and compliant online forms.
• Healthcare enterprises and hospitals: enterprise cloud deployments, managed GCP services, and infrastructure configurations with BAAs and enterprise-grade data center controls.
• Government and regulated organizations: provision of compliant hosting and security controls suitable for organizations that require audited handling of sensitive data.
• Developers and web agencies: managed hosting for web development teams, including WordPress hosting, site management, backups, and technical support.

Technology and Delivery Approach

• Data center infrastructure: use of multiple United States data centers with physical security, redundant power and environmental protections to host customer environments.
• Managed service delivery: end-to-end onboarding, environment provisioning, configuration management, and 24/7 operational support with defined response metrics for critical incidents.
• Security controls and automation: automated snapshot and backup policies, encryption of stored data and backups, integrity verification of snapshots, and optional web application firewalls and isolated server deployments.
• Integration and platform services: managed integrations with Google Workspace and Office 365 for compliant email, platform-specific managed services for WordPress and containerized workloads, and offerings that include GCP managed services.
• Compliance processes: issuance of BAAs, assistance with compliance verification, and coordination of penetration testing and audits for client environments.