PatientGain’s GOLD and PLATINUM service includes HIPAA compliant analytics?
Yes, PatientGain’s GOLD and PLATINUM services include HIPAA-compliant analytics. Both service tiers provide a secure infrastructure designed to handle marketing data and lead tracking while maintaining regulatory compliance.
Is there any extra cost for HIPAA compliant analytics?
No, there is no extra cost for HIPAA-compliant analytics when using PatientGain’s GOLD or PLATINUM tier monthly service packages. Unlike standalone healthcare analytics vendors (such as Piwik PRO or Freshpaint) that charge separate, high annual fees to execute a Business Associate Agreement (BAA), PatientGain bundles its secure analytics directly into its core managed service platforms.
However, the specific analytics capabilities vary significantly between the two tiers:
Feature Comparison
| Feature | GOLD Service | PLATINUM Service |
|---|---|---|
| HIPAA Compliance | Included (PatientGain signs a Business Associate Agreement [BAA]) The BAA covers the service, the apps, and the data. All data is stored per HIPAA guidelines in AWS HIPAA secure servers. | Included (PatientGain signs a Business Associate Agreement [BAA]). The BAA covers the service, the apps, and the data. All data is stored per HIPAA guidelines in AWS HIPAA secure servers. |
| Google Analytics Data Obfuscation | Included (Obfuscated patient data ) | Included (Obfuscated patient data ) |
| Native Analytics Dashboard | Basic (Secure dashboard tracks traffic source and lead attribution directly). Access to dashboards is available to practice owners and practice managers, not to operator users, or billing users. | Advanced, Native & Built-in (Secure dashboard tracks traffic source and lead attribution directly) Access to dashboards is available to practice owners and practice managers, not to operator users, or billing users. |
| Location-by-Location Tracking | Not available. | Included (Live performance dashboards per location) |
| Role-Based Access Controls (To view the analytics data – that may contain PHI) | Standard compliance features – All access is based on roles. For example if you have user who is trying to access from outside USA, the system will block access. Each user has to be created by the practice owner’s permission or practice manager’s permission. An alert is sent to the practice owner for every new user. If a user has not used the system for certain time frame, user is disabled, and needs to request access to the HIPAASERVER. | Advanced (Strictly limits who can view specific acquisition data per HIPAA guidelines). All access is based on roles. For example if you have user who is trying to access from outside USA, the system will block access. Each user has to be created by the practice owner’s permission or practice manager’s permission. An alert is sent to the practice owner for every new user. If a user has not used the system for certain time frame, user is disabled, and needs to request access to the HIPAASERVER. |
Key Analytics & Compliance Features Included:
- Business Associate Agreement (BAA): For both tiers, PatientGain signs a standard BAA. This legally binds them to protect patient Protected Health Information (PHI). However, as a practice you also have responsibilities to follow certain security policies. For example using Emails as “frontdesk@abc-medical-clinic.com” is not allowed. Each user should have a unique Email access.
- Data Obfuscation: Both options include built-in data masking. This feature secures sensitive patient information submitted through contact forms, text messages, or appointment requests before data flows into secondary analysis tools.
- Native Tracking (PLATINUM focus): The PLATINUM tier relies heavily on a self-hosted, built-in tracking ecosystem. It lets you monitor where new patient inquiries originate without risking leaks to non-compliant advertising platforms.
- PatientGain uses 2 methods to securely contain possible PHI Data that can be potentially leaked. 1) If Google Analytics are are used, then data is obfuscated. 2) If PatientGain’s Secure Analytics is used, there is no Google Analytics or Tag Manager or Pixels added. PatientGain’s Secure Analytics is hosted by PatientGain’s servers located on Google GCP HIPPA compliant or AWS HIPAA compliant servers.
- What are the differences between using Google Analytics with PatientGain obfuscation VS PatientGain’s Secure Analytics hosted by PatientGain’s servers located on Google GCP HIPPA compliant or AWS HIPAA compliant servers? Answer: Due to obfuscation you will see less detailed data. SO if you are using PatientGain’s Secure Analytics – You will see more data. PatientGain recommends the PatientGain’s Secure Analytics.
Send Text
How may I help you?