Security boundary
HIPAA & PHI Handling
Public website forms are for business inquiries only. Do not submit patient names, dates of birth, medical record numbers, claim IDs, insurance IDs, or other protected health information through public forms.
Secure intake
Claim files, PHI, and payer documentation should only be shared through an approved secure intake workflow after onboarding and required agreements are in place.
BAA requirement
When our work involves protected health information, a Business Associate Agreement should be completed before PHI is exchanged.
Minimum necessary access
Operational access should be limited to the information needed to perform the agreed billing, credentialing, A/R, reporting, or RCM support work.
Questions
Contact Request@unitedpmb.com before sending any claim-level information.