PRIVACY §10
Safeguards
ScriptStation maintains commercially reasonable administrative, technical and physical safeguards for personal information in systems under its control. For PHI, safeguards are governed by the BAA and the HIPAA Security Rule.
Security and data handling
Security and data handling
Pharmacies handle sensitive information. Here’s how ScriptStation handles it, based on our Privacy Policy and Terms of Service, and what we document for each deployment.
What our policies commit to
Stated in our Privacy Policy.
PRIVACY §5
External AI providers
ScriptStation does not intentionally submit identifiable PHI to an external AI provider unless the pharmacy has expressly authorized it in a separately signed written addendum.
PRIVACY §8
Retention
Retention of PHI is governed by the applicable BAA and customer agreements. A list of subprocessor categories is available on request.
Per-deployment documentation
Answered in writing before launch.
Every deployment gets written answers to these questions for its specific scope.
- 01
What is accessed
Which systems ScriptStation accesses, and for which steps.
- 02
Where it is processed
Where data is processed and how long it is kept under your agreement.
- 03
Who can access it
How access on our side is granted and removed.
- 04
What happens on failure
How exceptions and errors are logged and how your staff will know.
Responsibilities
Clinical responsibility stays with licensed staff.
- ScriptStation provides administrative and operational automation only
- Outputs must be reviewed by licensed personnel before use that affects patient care
- Pharmacists review and verify every prescription
- See Terms of Service §3 for the full responsibility statement
See it in your workflow