Is FreshBooks HIPAA Complaint?

HIPAA stands for Health Insurance Portability and Accountability Act. It’s the one that sets the standard for sensitive patient data protection.

All companies that deal with protected health information (PHI)t should have a physical, network, and process security measures in place and follow them to ensure HIPAA Compliance.

The covered entities are anyone providing treatment, payment, and operations in healthcare and business associates who have access to patient information and provides support in treatment, payment, or operations must be HIPAA Compliance. Their subcontractors as well and any other related business associates must also comply.

There is a need for data security and privacy especially when it comes to the users' health data.
FreshBooks being used by a lot of companies could be HIPAA compliant through Google Calendar but it does not include HIPAA compliance nor data security features.

If you’re looking to keep your customer data secure while also using Google Calendar, you’ll need to first upgrade to G Suite by Google Cloud. Then Google will share all your information with Zapier that would integrate it with Artichoke.

Or another route could be from your FreshBooks accounts through Zapier then an integration with Artichoke.

Artichoke integrates with FreshBooks making it easy to simplify and organize your appointment-based business.

Artichoke is a business platform for freelancers: everything in one place, on any device, wherever you work. A web page for booking online, automated reminders, one-touch payments, searchable progress notes, and simple solutions to take control of the numbers for today’s freelancers.

At Artichoke, we take the privacy of our users and their customers very seriously, which is why we constantly invest in developing an all-in-one solution that’s not only easy-to-use but also backed by rock-solid security that includes being HIPAA compliant.

How to get started to make FreshBooks HIPAA compliant.

What will you need?

• FreshBooks account
• Artichoke account
• Zapier account

Steps to connect:

• Go to Zapier to create or log into your account.
• Connect your Artichoke and FreshBooks account to Zapier.
• Choose what data you want to be synced.
• Your data will now automatically sync between Artichoke and FreshBooks.

Here are other Security and Reliability Safeguards of FreshBooks.

With FreshBooks, you could rely on them for the security and reliability of their software, systems, and all your data.

256-bit SSL Security

All information from your browser and to FreshBooks is protected from eavesdroppers with 256-bit SSL encryption. The lock icon in your browser lets you verify that you aren’t talking to a phishing site impersonating FreshBooks and that your data is secure in while in transit.

Firewalls

The FreshBooks application that includes your data are all securely behind firewalls.

Vulnerability scanning

FreshBooks’ servers are constantly scanned for vulnerabilities by Sikich LLP, their managing security provider. These scans test their servers both from the Internet and from inside our network, and any newly-identified problems are addressed as quickly as possible.

Strong encryption

FreshBooks uses industry-standard encryption protocols and practices to responsibly transmit sensitive information including cardholder details and data.

Physical security

The FreshBooks servers are located in state-of-the-art data centres, which provide biometric access controls, constant surveillance, redundant power feeds and generators, robust fire suppression, and carefully monitored climate control to protect the servers that store your data and manage your billing securely at all times.

PCI Compliance and Card Holder Data

Cardholder data should only be input by the user in areas that explicitly require it. FreshBooks handles cardholder data per PCI Data Security Standard requirements.

Where cardholder data storage is required such as automatic payments on recurring templates, FreshBooks leverages PCI DSS Level 1 Compliant partners who undergo an annual audit of its infrastructure.

Besides, FreshBooks maintains its PCI DSS Level 1 compliance and has its audit conducted by an independent third-party on an annual basis. A PCI attestation of compliance (AOC) can be requested at security@freshbooks.com.

Secure Development Practices

FreshBooks developers follow the secure development practices described in OWASP. Furthermore, we subscribe and adhere to the principals of the least access.

Breach Notification

If there is a security and/or privacy breach that occurs, we will notify the necessary authorities and impacted clients within the legally required timelines based on the Applicable Data Protection Law.

Reliability

The FreshBooks infrastructure uses redundant storage and servers to keep the application and your data available in the case of hardware failure and another set of servers and storage in a geographically separate data centre in case their primary data centre is made unavailable by a disaster or other disruption.

Managed hosting

The FreshBooks application utilizes the Google Cloud Platform (GCP) for hosting requirements. With a vast array of clients with varying needs, GCP provides an environment that allows for the fast delivery of features, continued product innovation, reliable security and stability, and a reduced chance of downtime.

Backups

The data in your FreshBooks account is replicated across multiple database servers in two geographic locations to prevent a single failure from causing data loss. Additionally, that data is backed up nightly to tape and stored in a secure offsite location to ensure that, even in the event of a catastrophe like a tornado or a flood, your information will be safe and your records can be quickly restored.

After Thoughts

Everything is made possible with FreshBooks. It has all the important areas for security and making sure all your data are safe with them.

Companies that need accounting software to HIPAA compliant will need not worry with FreshBooks. It made sure it would happen with integration with Artichoke through Zapier or Google.

Choose your best option and start using your FreshBooks that now comes with HIPAA compliance.