Privacy, security, and compliance can feel like a lot to navigate, especially when you're also running a clinic. This page brings everything together in one place, organized by topic, to help you find what you need.
Compliance by Region
Privacy law isn't one-size-fits-all. The region where your clinic operates affects what you're responsible for.
Canada 🇨🇦
Federal
By Province
- British Columbia’s Personal Information Protection Act (PIPA)
- FIPPA/FOIPPA for the BC Public Sector
- Is Jane Compliant with Alberta's Health Information Act (HIA)?
- Is Jane Compliant with Ontario’s Personal Health Information Protection Act (PHIPA)?
United States 🇺🇸
- Is Jane HIPAA compliant?
- Does HIPAA Allow Me to Email Patients?
- Is Jane Compliant with the California Consumer Privacy Act (CCPA)?
- Is Jane Compliant with the U.S. 21st Century Cures Act?
Europe 🇪🇺 & the UK 🇬🇧
Jane's Certifications & Trust
Wondering how Jane holds up to scrutiny? This section covers the third-party certifications, compliance standards, and documentation that back up Jane's commitment to keeping your data safe.
Protecting Patient Data
As a clinic, you're responsible for your patients' information, and Jane is built to help you meet that responsibility. This section covers data retention, deletion, clinical notes, AI data handling, and more.
- Deleting Patient Data
- Creating & Storing Compliant Clinical Notes
- Telehealth Appointments and Privacy Laws
- Staff Access Levels
- Account Ownership in Jane
- Jane's AI Principles
Account & Access Security
Day-to-day security starts with how your team logs in and who has access to what. These guides cover the practical steps to keep your Jane account secure.
- 2-Step Verification
- Multi-Factor Authentication
- 2-Step Verification: Locked out of your account?
- How To: Reset Your Jane Password
- Password Best Practices
- How to Set the Auto-Logout Duration for Staff
- How to View and Filter the Activity Log
- How to View and Manage Your Login Sessions in Jane
- All About the New Device Sign-in Email
- Unauthorized Access: What to Do if Your Laptop/Phone is Lost or Stolen
Communications & Email Privacy
Appointment reminders and notifications are a core part of running a clinic, but they come with privacy considerations. This section covers what you need to know to communicate compliantly.
- Does HIPAA Allow Me to Email Patients?
- GDPR Consent and Reminder Settings for EU and UK
- Are Emails from Jane Encrypted?
- How to Hide Patient Information from Financial Emails
- Third Party Messaging Service FAQ
- How Is Patient Privacy Protected When I Contact Jane Support?
Security Best Practices & Incident Response
General guidance for building a security-conscious clinic culture, from spotting phishing attempts to knowing what to do when something goes wrong.
- Security and Privacy Best Practices
- Phishing Safety
- All About the New Device Sign-in Email
- Unauthorized Access: What to Do if Your Laptop/Phone is Lost or Stolen
- How Is Patient Privacy Protected When I Contact Jane Support?
Still have questions? Reach out to the Jane Privacy and Security team at [email protected] or [email protected].