#Spideroak inc how to
#Spideroak inc update
#Spideroak inc software

Our software combines end to end encryption with a distributed ledger (aka Blockchain) technology to offer best-in-class security with no backdoors. Traditional systems trust IT infrastructure to maintain the whole security system, even though the news is rife with evidence that this model does not work. SpiderOak builds need-to-know technology that supports customers working in hostile environments. Instead of adding layers of security on top of an insecure system, we build software that is inherently secure. Our approach is fundamentally different from most mainstream security companies. SpiderOak is committed to building secure and reliable software that protects our customers’ data. SpiderOak has been building encrypted software since before the first iPhone was released. For any inquiries regarding PHI, HIPAA, security, privacy, please contact Attn: HIPAA Compliance.We want to change the world, and we’ve already done it once.

#Spideroak inc how to

You can find more information about how to request a SpiderOak Business Associate Agreement here. Even if unauthorized personnel are able to access the server, all they can see is encrypted, unintelligible data. When sensitive information is stored in plaintext form, there is always a risk of data being compromised during cyber attacks, resulting in compliance violations. The data remains encrypted until the user requests the data, which is then delivered back to the user’s computer in its encrypted state until the user decrypts it with the password.īecause the SpiderOak One, CrossClave, and Semaphor desktop applications store user data in encrypted form, it also provides the highest degree of protection against security breaches. With its No Knowledge privacy approach, the SpiderOak One desktop, CrossClave desktop and mobile, and Semaphor desktop and mobile applications encrypt the data on the user’s device before uploading the data to the cloud or syncing it across other devices. In order to comply with HIPAA, cloud service providers have to enforce stringent security policies for protecting the privacy and confidentiality of user data. If they are found not to be in compliance, they may have to pay fines up to $1.5 million dollars.

#Spideroak inc update

The latest update to HIPAA requires, among others, healthcare providers, medical institutions, and cloud storage services supporting those entities where PHI is involved to be compliant with HIPAA rules and regulations. Organizations that act in support of Covered Entities, as defined in HIPAA, are “Business Associates.” Cloud storage providers, such as SpiderOak, that support Covered Entities through the storage of PHI are Business Associates. The Security Standards for the Protection of Electronic Protected Health Information (the “Security Rule”) establish a national set of security standards for keeping certain health information secure while it is being held or transferred in electronic form. The “Privacy Rule,” or Standards for Privacy of Individually Identifiable Health Information, establishes national standards for keeping certain health information confidential. To guide organizations in fulfilling their HIPAA obligations, HHS has published what are commonly known as the HIPAA Privacy Rule and the HIPAA Security Rule. In order to comply with HIPAA, Covered Entities, which are defined in the HIPAA rules to include: (1) health plans, (2) healthcare clearinghouses, and (3) healthcare providers who electronically transmit any health information in connection with transactions for which Health & Human Services (“HHS”) has adopted standards, must act in an effort to ensure that patient information is both private and secure.

Under HIPAA, companies have obligations to meet certain privacy and security standards with regard to Protected Health Information (“PHI”). SpiderOak supports certain customers that are subject to the Health Insurance Portability and Accountability Act of 1996 and its implementing regulations as amended by the regulations promulgated pursuant to the Health Information Technology for Economic and Clinical Health Act, Title XIII of the American Recovery and Reinvestment Act of 2009 (collectively, “HIPAA”). Semaphor is a chat tool for real-time conversations and file-sharing that also complies with both the Privacy Rule and Security Rule.

CrossClave is a file sharing and collaboration tool with real-time chat that complies with both the Privacy Rule and the Security Rule. As its standard offering, SpiderOak One and Groups provides a cloud backup and storage system that complies with both the Privacy Rule and Security Rule. The SpiderOak applications CrossClave, SpiderOak One, CrossClave Groups, and Semaphor are HIPAA-compliant as a Business Associate.