Protocol release · Glossary
Terms this site uses, defined plainly.
No legal jargon standing in for an explanation. If a term appears elsewhere on this site, it's defined here.
Document status
- Terms
- 9 defined
- Scope
- General, not legal advice
Glossary
A–Z
- BAA
- Business Associate Agreement: the contract required under HIPAA between a covered entity and a vendor that handles PHI on its behalf.
- Covered entity
- A healthcare provider, health plan, or clearinghouse that HIPAA rules apply to directly.
- De-identification
- Removing or obscuring information that could identify a specific patient from a piece of clinical content.
- HITRUST
- A healthcare-specific security certification framework. Not yet complete for us. See the security ledger.
- PHI
- Protected Health Information: data that can identify a patient and relates to their health, care, or payment for care.
- Self-serve
- A purchase model where a clinician signs up and pays directly, without a procurement process or sales negotiation.
- SOC 2 Type II
- An independent audit of a company's security controls over a period of time. Not yet complete for us. See the security ledger.
- Subprocessor
- A third-party vendor that a company relies on to help deliver its service, and that may handle data as a result.
- Tokenization
- Replacing identifiable elements of clinical text with placeholder tokens before that text reaches a model, then reassembling the original content afterward.