Is Sumac HIPAA compliant?

Is Sumac HIPAA compliant?

Sumac supports all the technical requirements that enable an organization to be in compliance with the requirements of the HIPAA standard.

The basic things that Sumac does to comply with HIPAA are:

a. require passwords and user profiles that restrict visibility of the data to authorized users

b. encrypt connections between Sumac and the database

c. provide mechanisms for updating information in the database

d. log access to the information in the database

e. do all the above things securely (the security of these things that is required for Sumac's PA-DSS certification exceeds what the HIPAA standards require)

In the case of HIPAA, most of the requirements are imposed on the organization (i.e. the organization using Sumac), not the Sumac software itself. A Sumac user that leaves print-outs of medical history lying around on their desk is not complying with HIPAA (unless access to their desk is controlled), even though the Sumac software enables them to comply.

    • Related Articles

    • Release Notes - Sumac 4.7.5 - November 8, 2023

      What’s new Improved management of In Honor and In Memory donations In this release, we've made it easier to track and send notifications to the recipients of, or those who have given in Honor or in Memory of donations. You’ll find all of these ...
    • Societ Academy - Sumac Donations

      This series of six short webinars will teach you everything you'll need to know about using Sumac Donations. We've kept each segment short so you can work these sessions into your schedule. You can register for all 6 below! Sumac Donations Part I - ...
    • Societ Academy - Sumac Donation Receipt Templates

      Learn how to set up receipt templates in Sumac for Donations. Receipting in Sumac Donations: Templates Hosted by Meaghan Watson, Penny Rolinski About this webinar Welcome to our Sumac Donations Receipting Templates webinar! Whether you are making ...
    • Sumac and QuickBooks: Setting Up Your Integration

      Setting Things Up Sumac can integrate directly with Quickbooks to send General Ledger Entries from Sumac to Quickbooks for financially significant types of data. Before data can be transferred directly from the Sumac database to your accounting ...
    • Societ Academy - Sumac for Volunteer Management

      In this 15-minute webinar, you'll learn how to manage volunteer types, volunteers, and how to match the best available volunteer to a volunteering opportunity. Sumac for Volunteers Hosted by Penny Rolinski About this webinar Learn the basics of Sumac ...
    Societ Academy

    Learn what you need to know, any time. Free!



    • High quality training on demand - sessions are available every day, so you can access training that fits into your schedule.
    • Training sessions that are easy to follow - helpful tips throughout each session, and access to training moderators ensure your questions get answered.
    • A certificate of completion - you can request a certificate of completion for every session you attend.