Skip to content
Book a Free Consultation
Woman with a laptop walking along a row of servers
HIPAA Compliance

HIPAA Compliant Medical Billing That Protects Your Patients' Data

MedixCode is HIPAA compliant, and our staff are HIPAA-trained. We work inside your own EHR/PM system, you control who on our team has access, and you own your data.

Book a Free Consultation See How We Protect PHI

Why HIPAA Matters When You Outsource Billing

A billing partner needs access to your patients' protected health information (PHI) to do the work. That makes how they handle PHI as important as how they handle claims. The HIPAA Privacy, Security and Breach Notification Rules set the national standards for protecting PHI, and they apply to the partners who handle it on your behalf.

How we work

How MedixCode Protects Your PHI

  • HIPAA compliant.

    We handle your PHI the way HIPAA requires.

  • HIPAA-trained staff.

    Everyone on our team who handles your claims has HIPAA training.

  • We work inside your systems.

    There's no new software for your staff. They keep using the EHR/PM system they have.

  • You control access.

    Your team sets our permissions and can change them whenever it needs to.

  • You own your data.

    The records we work on remain your practice's property.

Before You Choose a Partner

Questions to Ask Any Billing Partner About PHI

  1. 01

    Will you work inside our systems, or copy our data into yours?

  2. 02

    Who on your team can see our patients' information, and how is access removed when someone leaves?

  3. 03

    Are your staff trained on HIPAA before they get access?

  4. 04

    What happens if you suspect a security incident, and how will you tell us?

  5. 05

    How long do you keep records, and what happens to our PHI when we stop working together?

  6. 06

    Who owns our data?

Ask us any of these on a free consultation.

Book a Free Consultation
Hand resting on a blank clipboard
2026 update

HIPAA Security Rule: Where Things Stand

  1. Jan 6, 2025 Update proposed
  2. Oct 2026 Not finalized
  3. Jul 2027 Final action projected

HHS proposed a major update to the HIPAA Security Rule on January 6, 2025. As of October 2026 it has not been finalized: HHS's 2026 regulatory agenda lists it as a long-term action, with final action projected for July 2027. The current Security Rule still applies in full.

Sources: Federal Register, Jan. 6, 2025 · HHS 2026 Unified Agenda, RIN 0945-AA22. Checked October 17, 2026.

How This Fits into Our Billing Work

HIPAA compliance runs through everything we do, from medical billing and medical coding to eligibility verification and full revenue cycle management. See also our Privacy Policy and FAQ.

FAQ

Frequently Asked Questions

Common questions about how we handle PHI.

It means the company follows the HIPAA Privacy, Security and Breach Notification Rules when it handles protected health information (PHI). MedixCode does, and our staff are HIPAA-trained.

Our work happens inside your EHR/PM system, and your team chooses which of our people can log in.

You do. We work on it inside your system, and ownership stays with you.

No. Our website forms and email links aren't meant for patient information. Once an agreement is in place, we work inside your own systems.

Choose a Billing Partner That Takes PHI Seriously

Talk to us about your practice and how we'd protect your patients' data while we handle your billing.

Book a Free Consultation

HIPAA compliant · HIPAA-trained staff · AAPC/CPC Certified Coders and Billers

Sources: HHS: HIPAA Privacy Rule · HHS: HIPAA Security Rule · HHS: Breach Notification Rule