Q: I'm looking for a computer back up service but am concerned about HIPAA compliance. Are you certified for HIPAA protection and could you provide documentation?

• Tweet

April 26th, 2010 - Posted by Kent

The following is an actual user-submitted question:

Q: I'm looking for a computer back up service but am concerned about HIPAA compliance. Are you certified for HIPAA protection and could you provide documentation?

A: Thanks for the question. First, we should point out that NextAdvisor does not provide online backup services, we just review them. Having said that, we can give you our best advice. During our reviews, the only service that we found that advertised HIPAA compliance is IDrive's business backup. Our testing focused only on IDrive's consumer plans, but according to their site:

As proposed, a HIPAA-compliant information system will need to include a combination of administrative procedures, physical safeguards and technical measures to protect patient information while it is stored and transmitted across communications networks. IDrive provides critical data security protection without compromising patient privacy and can help customers achieve HIPAA compliance.

You can read more about IDrive's HIPAA compliance here. IDrive also advertises that their business plans (starting at $99.50 per year for 50GB of storage) are Sarbanes-Oxley (SOX), SEC/NASD, and Gramm-Leach-Bliley compliant. Note that the link from our review goes to the sign-up page for the consumer plan; you can sign up for IDrive's business plan by clicking here.