We are a global organization. Our engineers work from several countries, and every one of them is an employee of the company — not a contractor, and not an outsourced service desk.
That distinction is the one that matters. Employees are workforce members under our direct control, which places them inside the Business Associate Agreement we sign with you. They are not a separate chain of subcontractors that you would then need your own assurances about.
Every employee completes the same security and privacy training, on the same schedule, wherever they are based. We keep those records and can produce them for your security review.
On location specifically: HIPAA does not restrict where protected health information may be accessed from — it restricts who may access it, and how. Some contracts do impose location terms. If you hold a Medicare Advantage contract, a state Medicaid contract, or a payer agreement with offshore restrictions, tell us early and we will work through the specifics with you, including telling you plainly if we are not a fit.
