Onsite & Offsite Encrypted Backups for Giva's Service Management Suite

Giva's HIPAA-compliant backup strategy creates regular backups on a daily and weekly basis to enable the ability to quickly restore data from encrypted backups, if needed.

HIPAA Cloud Storage Requirements

  • Giva's HIPAA-compliant record retention requirements in the cloud ensures that customer data is never deleted and always available if need for an audit or legal discovery.
  • Our carefully vetted partnership with our hosting provider ensures that we have best in class cloud storage services that are HIPAA compliant.
  • HIPAA compliance is also a critical part of the our backup and restore plans, if ever needed. All backups are encrypted, and some are stored offsite for additional redundancy.

Onsite Data Backups

  • HIPAA Compliant Cloud Storage - Customer data is never deleted and always available.
  • Data Backup Plan (R) - §164.308(a)(7)(ii)(A) Giva's HIPAA-compliant backup procedures create and maintain retrievable exact copies of all data that contain protected health information (PHI) from electronic health and medical records.
  • Giva performs daily incremental backups and weekly full backups. Weekly full backups are retained for 2 weeks and daily incremental backups are retained for 1 week to ensure that critical data remain safe, encrypted and always available.
  • Backup and Recovery Plans - Primary Backups are stored locally for fast restores.

Offsite Backups - Data Center - Different Location

  • Offsite backups are a key requirement of HIPAA's Disaster Recovery Plan (R) - §164.308(a)(7)(ii)(B) to ensure procedures are in place to prevent data loss.
  • To mitigate the risk of a catastrophic data loss in our redundant data center facilities, Giva further replicates backups to another data center in a different location.
  • Backups are replicated to our offsite data center facility in a different location every 24 hours.