Simple, secure file transfers for Healthcare

Couchdrop and HIPAA

While there’s no specific HIPAA compliance for file transfers, SFTP servers that “use AES-256 symmetric cryptography for stored data and protect transmitted data using a RSA 2048 bit key” meet NIST and HIPAA standards according to HIPAA Journal.

Couchdrop meets these minimum requirements for file transfers with HIPAA data. Our unique approach of not storing data and integrating with external Cloud Storage engines like AWS S3 ensures that customers have complete control over their data.

HIPAA-compliant architecture

Couchdrop has a dedicated HIPAA-Compliant Architecture designed to be used exclusively for customers moving HIPAA data. This architecture differs from Couchdrop’s standard architecture in a few noticeable ways.

One difference is that HIPAA data uses dedicated compute nodes located in the United States which are used exclusively for HIPAA customers. Data is processed in San Francisco and never leaves the United States.

Couchdrop’s HIPAA cluster is housed in Amazon Web Services (AWS) due to their HIPAA-compliant options. AWS will designate accounts specifically as HIPAA accounts and meets FedRAMP and NIST 800-53 that map to the HIPAA Security Rule. AWS also has a standard BAA for HIPAA clients as required for CSPs.