When HIPAA applies to signage
HIPAA covers protected health information held by a covered entity, such as a hospital, and by the business associates that handle it for them. A vendor becomes a business associate when it creates, receives, keeps or sends that information, and then it signs a business associate agreement (BAA). Signage becomes a HIPAA question when a screen shows patient names, or when the vendor's cloud would hold them. Screenly is designed so that neither happens.
How Screenly keeps patient data off screens
- 01
No patient data in Screenly
Screenly holds no patient records. A queue screen calls a ticket number to a counter or room, never a name, so nothing a passer-by reads identifies a patient.
- 02
Internal dashboards stay inside
Applies to: ScreenlyOS
A ScreenlyOS device loads an internal page, such as a bed board on a staff-only screen, straight from your server or over your Tailscale network. Screenly does not receive the page.
What a screen sends - 03
No pictures of sensitive screens
Screenshots are the one way what a screen shows reaches Screenly. Privacy mode stops them being captured or stored, screen by screen.
- 04
Audited controls
The platform is audited for SOC 2 Type II and certified to ISO/IEC 27001:2022. Neither is a HIPAA certification, and there is no such thing; they are what a hospital's vendor review checks in its place.
What a hospital review asks
| Topic | Where Screenly stands |
|---|---|
| A signed BAA | Not today. Screenly stores no patient data |
| Patient names on public screens | Not by design; queues use ticket numbers |
| HITRUST certification | No |
| SOC 2 Type II | Yes |
| ISO/IEC 27001 | Yes |
Questions
Does Screenly sign a HIPAA business associate agreement?
Not today. Screenly stores no patient data by design, and a public screen should not show any.
Does Screenly store patient data?
No, by design. Queues call a ticket number to a counter or room, never a name.
Is Screenly HITRUST certified?
No.
Is Screenly HIPAA compliant?
No software is HIPAA compliant on its own; HIPAA applies to how an organization handles patient data. Screenly is built so it holds none, and does not sign a BAA today. The healthcare page covers what hospitals run on it.