Question 1

Is Intel e-medix a HIPAA covered entity?

Accepted Answer

No. Intel e-medix operates as a technology vendor. When a US clinic, lab, or provider uses the platform to process Protected Health Information (PHI), Intel e-medix acts as a Business Associate under HIPAA and signs a Business Associate Agreement (BAA) with that covered entity.

Question 2

How do I request a Business Associate Agreement (BAA)?

Accepted Answer

Email compliance@intelemedix.com from your organization domain with your legal entity name, primary contact, and intended use case. We return a standard BAA within 2 business days; redlines are reviewed by counsel.

Question 3

Is the consumer (self-serve) version covered by a BAA?

Accepted Answer

No. The self-serve consumer product is an educational tool. Individuals using it on their own reports are not covered entities under HIPAA, so no BAA is required or offered. For any clinical or provider workflow involving PHI, use the enterprise plan with a signed BAA.

Question 4

What HIPAA Safeguards are in place?

Accepted Answer

Administrative: workforce training, access reviews, incident-response runbook. Physical: SOC 2-aligned cloud hosting, no on-prem PHI. Technical: AES-256 at rest, TLS 1.2+ in transit, row-level access controls, unique user authentication, automatic 48-hour data purge, full audit logs of every read/write/delete.

Question 5

Where is PHI stored and processed?

Accepted Answer

Primary data residency is US (us-east). EU/UK customers can request EU residency. PHI is never sent to model providers that do not contractually exclude it from training, and never to providers outside the BAA-permitted subprocessor list.

Question 6

How are breaches reported?

Accepted Answer

We follow the HIPAA Breach Notification Rule: contain within 24h, assess scope, notify the covered entity without unreasonable delay and no later than 60 days from discovery, and provide the information required for the covered entity to notify affected individuals and HHS.

Question 7

Can patients use this as a substitute for a doctor?

Accepted Answer

No. Intel e-medix provides plain-English educational explanations of medical reports. It does not diagnose, treat, or replace a licensed clinician. Always consult your physician for medical decisions.

How Intel e-medix handles Protected Health Information.

Safeguards in place

Administrative safeguards

Physical safeguards

Technical safeguards

Audit controls

Request a Business Associate Agreement

Frequently asked questions