Business Associate AgreementM. PracticeSigned
HIPAA and BAAs
We're a business associate under HIPAA. We sign a BAA with every practice before any access, and hold BAAs with the vendors that handle PHI for us.
← Back to AnySenseSecurity and privacy
Patient data deserves more than a checkbox.
AnySense works inside EHRs, payer portals and clearinghouses on your behalf. Here's exactly how we protect what we see there.
BAA before any accessUS billers approve every actionNothing sent without a click
Claim 88412Worked by AnySense · sample data
ProtectedPatientSample Patient
Date of birth03/14/1951
Member IDW2847 9913 4821
Service11721 · nail debridement
StatusReopening requested
Approved by a US biller · access logged
Where your data goes
One path. Locked at every step.
A claim moves from your EHR to the payer through four hands, and nothing else touches it.
Your EHRModMed, eCW and the claims in them
AnySense agentsDraft the work on the practices they’re assigned to
A US billerReviews and approves every action
Payer portalReached with our own credentials
Never on the pathOffshore staffShared passwordsSelling your data
How we protect patient data
Six things we do on every claim.
Maria R. · DOB 03/14/1951x9#Kq!2vT$0p&Lm4Rz8@Wd
Encryption
Patient data is encrypted in transit and at rest.
Biller AFoot & Ankle Group
AI agentFoot & Ankle Group
Biller BRevoked
Access you control
Each biller and each AI agent can only reach the practices they're assigned to. Access is logged, and you can revoke it anytime.
Payer portal loginAnySense credentials
2-step code4 8 2 · 9 1 3handled by AnySense
No shared passwords
AnySense signs in to payer portals with its own credentials and handles two-factor codes, so your staff never hand over their logins.
Application · AnySense
Network controlsSOC 2 Type II
Physical data centersSOC 2 Type II
SOC 2 infrastructure
We run on cloud providers that hold SOC 2 Type II reports, and inherit their physical and network controls.
AI draftReopening · add Q8
Approve
People in the loop
US-based billers approve every action the AI drafts. When a portal changes, the fix is reviewed by a person before it runs.
FREEANYSENSE ANYWHERE
The free extension, explained.
It works inside the browser your billers already use. Here's what that means for your data.
- It reads the pages a biller opens, the way the biller does. No screenshots of their screen.
- It only works in the systems it supports, like ModMed, eCW and Availity.
- Nothing gets sent without a click. Appeals, notes and forms wait for the biller to approve them.
- Free accounts are covered by the same BAA and encryption as paid ones.
ModMed EMAAnywhere active
Availity EssentialsAnywhere active
news-site.exampleAnywhere stays off
Ready to sendReconsideration · Claim 88412
Approve and sendWaits for the biller's click. Nothing leaves on its own.
Where we are on compliance
The straight answers.
We'd rather tell you exactly where we stand than hand you a wall of logos.
In place
HIPAABusiness associate, with written policies and staff training.
In place
Business Associate AgreementSigned with every practice before access.
In place
Where data livesUnited States.
In place
When you leaveWe return what's yours and delete the rest.
Questions practices ask
Security FAQ
Something we didn't cover? Ask us, and it ends up here.
Ask a security question01Do you use offshore staff?
No. Our billers are US-based, and they're the ones who approve every action on your claims.
02Who can see our claims?
The AnySense billers and AI agents assigned to your practice, plus engineers who need access to fix a problem, with that access logged.
03Will you sign our BAA, or do we sign yours?
Either works. We have our own, and we'll review yours.
04Can you fill out our security questionnaire?
Yes. Send it over and we'll turn it around quickly.
For practice owners, RCM leads and compliance
Need our security packet?
Ask for our BAA, security questionnaire answers or a call with our CTO.
Talk to us about security