Cavo Health is a Healthcare technology company, which offers software-as-a-service (SaaS) that provides its customers with Precise Word Matching AI technology to automate matching and coding of Hierarchical Condition Categories (HCC). Cavo Health's Precise Word Matching AI engine finds more than 96% of the HCCs in medical records before coders even begin coding. Currently, Cavo Health's suite of products automates virtually the entire risk adjustment coding workflow along with delivering the unprecedented auto-coding accuracy and HCC completeness.
Cavo Health sells a service which interacts with Protected Health Information (PHI). It was imperative that Cavo Health prove to its customers that its software, which is hosted on Amazon Web Services (AWS), was in compliance with HIPAA guidelines for PHI. Cavo was primed for tackling this challenge and more so, after contacting Jacobian Engineering for assistance. The way for Cavo Health to resolve this challenge would be by achieving a HITRUST certification for its SaaS application.
HITRUST CSF, a security framework that provides organizations a comprehensive, flexible, and efficient approach to regulatory/standards compliance and risk management. Additionally, it provides the structure, transparency, guidance, and cross-references to authoritative sources that organizations globally need to be certain of their data protection compliance.
Cavo built its solution and operated it under the standards and guidelines provided by the Health Insurance Portability and Accountability Act (HIPAA). Threats to healthcare organizations are on the rise and Cavo wanted to implement a security framework that helped the organization manage and reduce risk. Jacobian worked with Cavo to implement and assess controls under HITRUST CSF.
By leveraging the HITRUST inheritance program, Amazon Web Services customers are able to inherit as many as 85% of controls either fully or partially. Jacobian has been a member of the HITRUST Alliance assessment program for 8 years. With Jacobian's help, a pre-assessment was conducted, gaps were identified and Cavo worked diligently to close gaps using Amazon platform and infrastructure services.
HITRUST CSF groups into 19 domain categories aligned with common IT process areas containing various control requirements. Many controls in the following domains are implemented using Amazon Web Services including:
A limited number of controls may be addressed through the use of Amazon Web Services for the remaining domains and Cavo implemented organization and system controls to address the remainder in these domains:
Cavo Health achieved HITRUST certification for its application, which has since resulted to measurable success in sales and overall interest in the SaaS platform. Marketing and Business Development teams at Cavo health are also benefiting immensely from this certification because obstacles of HIPAA compliance have been addressed.
Jacobian Engineering is an information security company and an AWS Advanced Tier Services Partner. Jacobian Engineering works with customers in several industries including healthcare, biotechnology, energy, financial services, construction and has strong competencies in cloud security, software development, migrations, governance, risk, and compliance.
Challenge: Cavo Health needed to prove HIPAA compliance for their AI-powered healthcare coding SaaS platform that processes Protected Health Information (PHI). Solution: Jacobian Engineering helped them achieve HITRUST certification by implementing comprehensive security controls using AWS services, enabling successful sales to healthcare customers.