HIPAA-compliant field sales
Badger is fully HIPAA compliant, so healthcare and life sciences teams can map accounts, plan routes, and log visits with confidence.
Fully HIPAA compliant
For customers subject to HIPAA.
Hosted on AWS
All data is stored on AWS, which undergoes annual physical and virtual security certifications.
Every app covered
Web, mobile, territories and CRM accounts.
HIPAA in 20 seconds
What it is
A 1996 US law that sets requirements for protecting patient health information, known as PHI.
Who it applies to
Covered entities, like healthcare providers, and the business associates, like Badger, that process PHI on their behalf.
Compliant across the whole platform
HIPAA compliance isn't limited to one feature. It covers everywhere your team uses Badger.
Web app
The core field sales application.
iOS and Android
The mobile apps reps use in the field.
Territory Management
Every territory tool.
CRM-integrated accounts
Every account synced with your CRM.
Getting started with PHI takes three steps.
HIPAA requires a Business Associate Agreement (BAA) between you, the covered entity, and Badger, your business associate.
Send us your BAA
Email your organization's BAA to sales@badgermapping.com.
We review and sign
Our team reviews your agreement and signs it.
Start using PHI
Once the BAA is signed, your team can use Badger with PHI.
HIPAA is a shared responsibility
Badger secures the platform. Your team controls how PHI is used inside it.
Badger secures the platform
- All data hosted and stored on AWS
- Data encrypted in transit with HTTPS and SSL/TLS
- Daily backups encrypted at rest with AES-256
- Continuous monitoring and incident response
Your team controls how PHI is used
Steps that keep your use of Badger compliant:
- Sign a BAA with Badger before sharing any PHI
- Decide which team members can access PHI
- Manage user access through SSO and SCIM, and remove users promptly
- Follow your organization’s own HIPAA policies in the field
Bring Badger to your healthcare field team.
Map accounts, plan routes and log visits, with PHI protected at every step.