HIPAA at Awell
Last updated 31 July 2026
Awell Health BV (“Awell”) is committed to protecting and respecting your privacy. Some of the services Awell provides involve Protected Health Information, or PHI, and are covered by the Health Insurance Portability and Accountability Act (HIPAA).
Our role under HIPAA
Awell acts as a Business Associate. We process Protected Health Information on behalf of the healthcare organisations we work with, under a Business Associate Agreement, and we follow the HIPAA Security Rule safeguards for how that information is stored, accessed and transmitted.
The healthcare organisation providing your care holds your health records and decides how they are used. We act on their instructions.
If you are a patient
To exercise your rights over your health information, such as requesting access to it or asking for a correction, please contact the healthcare organisation providing your care. They are able to action those requests; we are not. You can read more about your rights under HIPAA on the HHS website.
Business Associate Agreements
We sign a Business Associate Agreement with every customer whose use of Awell involves Protected Health Information.
How we protect PHI
We apply administrative, physical and technical safeguards in line with the HIPAA Security Rule. Our information security management system is certified to ISO 27001:2022 and we maintain a SOC 2 report. Our current security posture, certifications and audit reports are published on our Trust Center.
Breach notification
If we become aware of a breach affecting Protected Health Information, we notify the affected customer without unreasonable delay, in line with our Business Associate Agreement and HIPAA's breach notification requirements.
Contact
If you have questions or concerns about our privacy or security practices, please contact our HIPAA Compliance Officer, Siebert Timmermans, at siebert@awellhealth.com or security@awellhealth.com.
To learn how Awell collects, uses and discloses information through our website, applications and other online services, please refer to our privacy policy. That policy applies to information collected in connection with those services, except for individually identifiable health information that is Protected Health Information under HIPAA.
For general questions you can also visit the Contact Us section of our website.
