Nrhiav ib Tus Kws Kho Mob
Tus Xov Tooj Tham Nrog Ib Tus Kws Tu Neeg Mob
Kws Kho Mob Lub Chaw Tswj Xyuas Tswvcuab Cov Ntaub Ntawv
Hu Tuaj Rau Peb
English
Hmong
Spanish
aA Kev Mus Cuag lossis Saib Xyuas Tau
Saib xyuas kom pom muaj xim txhoIbIbIb

English
Hmong
Spanish

Rau Cov Tswvcuab
Rau Cov Kws Pab Kho Mob
Rau Cov Zej Zog
Cov Kev Npaj Kho Mob
Lus Qhia Txog Peb

Rau Cov Tswvcuab
Rau Cov Kws Pab Kho Mob
Rau Cov Zej Zog
Cov Kev Npaj Kho Mob
Lus Qhia Txog Peb

Tsev > Developer Questionnaire

Developer Resources

Patient Access
Phau Ntawv Teev Npe Cov Kws Kho Mob
API Developer Application

Developer Questionnaire

Step 1 of 4

25%

Hidden

Consent Management, Use and Disclosure

Your application is compliant with the FTC Principle of Collection Limitation of personal data(yuav tsum tau)

Yes

Your Application is compliant with the FTC User Limitation which describes data should be used only for the purposes specified at the time of collection(yuav tsum tau)

Yes

Your application provides members the ability to request the secure and complete disposal of their identifiable health data(yuav tsum tau)

Yes

Your application provides each individual a right to see any data bout him or herself. Your application also allows them to annotate any data that is not timely, accurate, relevant, or complete(yuav tsum tau)

Yes

Security and Incident Management

On behalf of Central California Alliance for Health's members, your application request a copy of their health data (ePHI) from the HIPAA designated record set, maintained by a health care provider, health plan or health information exchange as per below mentioned methods:

By relying on a health care provider or health plan portal's 'Identity Credential' using SMART or, by accepting a 'Digital Identity Credential' for the member that is at least NIST Identity Assurance level2 (IAL2) and Authenticator Assurance level2 (AAL2)(yuav tsum tau)

Yes

By clearly indicating the destination for sending the personal data including ePHI(yuav tsum tau)

Yes

Your application protects personal data through mechanisms including, at minimum:(yuav tsum tau)

Secure storage
Encryption of digital records, both in transit and at rest
Data use Agreements and Contractual obligations
Accountability measures

Yes

Your application practices a defined policy to handle dormant accounts(yuav tsum tau)

Yes

Your application adopts internal policies and secure contractual commitments with third parties to prohibit the re-identification of de-identified or anonymized data(yuav tsum tau)

Yes

Your application provides a mechanism to verify that ePHI/personal data has not been altered, modified, or destroyed in an unauthorized annotation, or disclosure manner(yuav tsum tau)

Yes

You agree to comply with applicable breach notification laws and provide meaningful remedies to address security breaches, privacy or other violations incurred because of misuse of the member's health information(yuav tsum tau)

Yes

Your application has proper authentication and authorization controls, as per best practices(yuav tsum tau)

Yes

Application and Data Security

Your application mitigates the OWASP top 10 Application Security Risks(yuav tsum tau)

Yes

Your application has a mechanism to verify that ePHI has not been altered, modified, or destroyed in an unauthorized manner(yuav tsum tau)

Yes

Your application's error handling process ensures that no sensitive or personal information is disclosed(yuav tsum tau)

Yes

Your application does not use production data in the test environment for testing purposes(yuav tsum tau)

Yes

Your application ensures data backup and data recovery best practices(yuav tsum tau)

Yes

Your application generates system and application level audit logs as per HIPAA requirements(yuav tsum tau)

Yes

Your application audit logs are secured and reviewed periodically(yuav tsum tau)

Yes

Your application mitigates the OWASP Mobile Top 10 Security Risks(yuav tsum tau)

Yes

Your application follows industry best practices for data encryption(yuav tsum tau)

Yes

Does your application require a usage fee either from members or plans(yuav tsum tau)

Yes

Is your application hosted and developed outside of the United States(yuav tsum tau)

Yes

Information Attestation(yuav tsum tau)

I hereby confirm and owe that the information provided herein, is accurate, correct and complete. I am attesting on behalf of my organization in capacity of third-party or vendor who I represent and I am associated with. I stand accountable for the information and the documents submitted with regards to their authenticity and validity. The Alliance shall not be responsible or accountable for any of the information provided herein. I understand and agree that a false statement may disqualify me for the opportunity and the benefits presented herein.

CAPTCHA

Lub Npe

This field is for validation purposes and should be left unchanged.

Hu Tuaj Rau Peb | Hu Dawb: 800-700-3874

Cov Ntsiab Lus Txhais
Txoj Cai Txwv Tsis Pub Lwm Tus Paub
Cov Ntsiab Lus Qhia thiab Cov Ntsiab Lus Qhia Siv
Daim Ntawv Tshaj Xo Txog Kev Tsis Cais
Daim Ntawv Ceeb Toom Txog Kev Txwv Tsis Pub Lwm Tus Paub Txog
Lus Qhia Txog Kev Siv Lub Vev Xaib
Daim Ntawv Qhia Txog Lub Vev Saib No

Developer Resources

Developer Questionnaire

Consent Management, Use and Disclosure

Security and Incident Management

Application and Data Security

Kev Mus Nrhiav Kev Pab

Kev Pab Rau Cov Tswvcuab

Lub Alliance

Kev Mus Cuag lossis Saib Xyuas Tau