HIPAA-aligned, for US practitioners
We protect health information with HIPAA-aligned safeguards.
- Not a covered entity. We act as a Business Associate only when providing services to a U.S. covered entity under a signed BAA.
- Otherwise we apply HIPAA-aligned safeguards voluntarily.
- Administrative, technical and physical safeguards, including TLS in transit, encryption at rest and audit logs.
- You can access or request a copy of your records, and request corrections.
What is HIPAA?
HIPAA is a U.S. law that sets privacy and security requirements for Protected Health Information (PHI) handled by covered entities and their business associates.
How HIPAA applies to Biomesight
Role
Not a covered entity. We act as a Business Associate only when providing services to a U.S. covered entity under a signed BAA; otherwise we apply HIPAA-aligned safeguards voluntarily.
PHI we may handle
Names/contact details linked to kit IDs and test results; data you add in your account.
Vendors
We maintain BAAs with applicable U.S. vendors that handle PHI
US practitioners sign our Business Associate Agreement online, in their account.
Safeguards
Administrative
- Policies
- Training
- Role-based access
- Least privilege
- Vendor due diligence
Technical
- TLS in transit
- Encryption at rest
- MFA (for certain roles/scopes)
- Audit logs
- IP-restricted admin access
- Backups
Physical
- Restricted data center access
- Secured offices/devices
Your options
Access or request a copy of your records.
Email us →Request corrections.
Email us →Contact
Postal
PeerQuity Ltd t/a Biomesight128 City Road
London, EC1V 2NX
United Kingdom
This page is informational and not legal advice.
Last updated: 13 August 2025