HIPAA Compliant Respirator Clearance

Yes. RespiratorTest.com is fully HIPAA compliant. We implement all required administrative, physical, and technical safeguards to protect employee medical information. Your health data is encrypted in transit and at rest, access is strictly controlled, and we maintain comprehensive audit logs as required by HIPAA regulations.

Employers only receive the clearance certificate showing: (1) whether the employee is medically cleared, (2) any limitations or restrictions, and (3) the date of clearance. Employers do NOT see the employee's medical questionnaire responses, specific health conditions, medications, or any other protected health information. This separation is required by HIPAA.

Your medical information is protected with: 256-bit AES encryption for all data at rest, TLS 1.3 encryption for data in transit, role-based access controls, multi-factor authentication for administrative access, regular security audits and penetration testing, secure cloud infrastructure (AWS GovCloud eligible), and 30-year compliant record retention with secure deletion protocols.

Only the reviewing PLHCP (Dr. Nader Mikhail, MD) can access your medical questionnaire responses. Your employer cannot see your questionnaire. Our system administrators have technical access for support purposes but are bound by HIPAA requirements and confidentiality agreements. Access is logged and auditable.

Yes. RespiratorTest.com executes Business Associate Agreements with covered entities as required by HIPAA. If your organization requires a BAA, contact our enterprise team at enterprise@respiratortest.com. We have standard BAAs in place and can accommodate custom requirements for large healthcare systems.

Medical evaluation records are retained for 30 years plus the duration of employment, as required by OSHA 1910.1020. Records are stored securely with encryption and access controls throughout the retention period. After the retention period, records are securely deleted using NIST-approved methods.

RespiratorTest.com maintains: HIPAA compliance with annual third-party audits, SOC 2 Type II attestation (in progress), SSL/TLS encryption (A+ rating), secure cloud infrastructure on AWS with HIPAA-eligible services, and regular penetration testing by independent security firms.