Privacy & Data Security Practices
Our Commitment
Zavisa RCM is a third-party medical billing and revenue cycle management company. We operate as a HIPAA Business Associate and handle protected health information (PHI) only under signed Business Associate Agreements (BAAs) with our clients.
Safeguarding patient and client data is a foundational part of how we do business.
How Information Is Used
We access, use, and disclose PHI solely to provide contracted revenue cycle management services, including auditing, billing, claims management, payment posting, reporting, and related administrative functions.
We do not:
- Use PHI for marketing or advertising
- Sell or share PHI outside of contracted services
- Access information beyond what is necessary to perform our work
Safeguards
We maintain appropriate administrative, technical, and physical safeguards designed to protect the confidentiality, integrity, and availability of client data, including:
- Role-based, minimum-necessary access controls
- Use of secure, HIPAA-eligible systems and platforms
- Workforce training on privacy and compliance requirements
- Ongoing monitoring of access and workflows
Our approach balances regulatory compliance with efficient, practical operations.
Client Responsibility
Zavisa RCM acts under the direction of our clients. Each client remains responsible for their own Notice of Privacy Practices, patient communications, and compliance obligations as a Covered Entity under HIPAA.
Website Information
When you visit our website, we may collect limited information such as contact details you voluntarily submit and basic website usage data. We do not collect patient health information through our website.
Website information is used only to respond to inquiries, communicate about our services, and improve site functionality. We do not sell or share website data for marketing purposes.
Questions
If you have questions about our privacy or data security practices, please contact us at
through our contact form.
This page is provided for informational purposes and does not replace the terms of any signed Business Associate Agreement.