HighLevel
Create
Roadmap
HIPAA Compliance
13
Changelog
Log in to your HighLevel account to give feedback
Powered by Canny

HIPAA Compliance

posts
Data storage in Canada
I’m based in Canada and I’m running into some very regulated industries, specifically financial services and education, that can’t use my services or SaaS unless their data is stored in Canada. It would be amazing if there was an option for this, even if it was an add-on similar to HIPPA.
0
When will SOC2 compliance be released?
3
Allow Square as a payment method for Forms
GHL doesn't recognize square as payment processor in GHL under Calendar>forms&payments>accept payments. This options is not checkable. I guess it requires Stripe. However, my client is adamant about using Square, so they'd rather stop their $400 GHL account than switch to Stripe. They are paying $97 + the $297 for HIPAA. Please fix this simple issue!
1
Data storage for Australian Agencies & sub-accounts in Australian Data Centres
I run my SaaS business here in Australia, and all my clients are Australian based businesses. I often lose deals when potential customers ask whether their data is stored on AWS servers within Australia or overseas. At the moment, I have to explain that the data is stored on the AWS cloud by GHL in geographically dispersed locations, and unfortunately, there is no way to guarantee it stays within Australia. This has become a major sticking point, especially for some of my larger clients. And it’s often a deal breaker. I end up losing opportunities simply because I can’t provide certainty around local data storage. Please consider having an option for Australian agencies, or sub-accounts based in Australia, where they can choose to store their data exclusively in Australian data centres
1
Exposed media uploads
The media upload of files is publicly available. Even though the link is not necessarily easy to guess, the data is still publicly available and presents a flaw on data protection. Enabling HIPAA compliance does not make any difference, the media items have no request for authentication when visiting a link to the uploaded file. All form fields should be treated as sensitive data, including file uploads. This is a security risk for anyone using the file upload form field to collect personal data in some way.
9
·

under review

hipaa compliance
make highlevel hipaa compliant. sign baa with agencies. this will help benefit anyone working in the health niche. HIGHLVL-I-226
1
Generate fillable PDF documents for HIPAA
Please consider adding the ability to generate a fillable PDF documents within your HIPAA compliance package and allow signatures. The medical facilities continue to ask us for this and it would solve many of their issues and make the entire HIPAA package complete. HIGHLVL-I-2290
6
HIPAA Compliant video player
Add a player inside HL that can play Cine clips. Cine clips are .avi files. Medical facilities share these files with doctors to read Ultrasound clips and X-rays and then sign off on them. Currently, we can upload the clips but doctors have to download them out of the HL system to play them. This breaks HIPAA Compliance. Medical facilities are paying for Hipaa DocuSign for this service and it costs about $4K per year. This is a nice value add to bolt into HL.
0
Enable HIPAA Permissions in API
Allow us to turn on subaccount level HIPAA via the API
0
HIPAA
HIPAA Compliancy Policy Template documents that we can use as marketing agencies so we do not have to recreate the wheel. This should be something provided when we join in for HIPAA account and are working with the Compliancy Group
1
Load More
→
Powered by Canny