---
title: "Health matters: Store and process healthcare data in a HIPAA-compliant manner using Intercom"
description: "Intercom announces that it has completed a HIPAA attestation examination covering how it stores and processes health-related data, including protected health information (PHI) and electronic protected health information (ePHI). The examination was performed by an independent Certified Public Accounting firm, which reviewed HIPAA policies, procedures, and controls against the HIPAA Security Rule and HITECH Breach Notification Rule requirements. Intercom says the result allows it to enter Business Associate Agreements with applicable healthcare customers and make the attestation report available for review. Reported customer metrics include a 90% median CSAT score, 36% automatic resolution of common healthcare questions, and more than 500k healthcare conversations powered daily. Intercom also says it will perform the examination annually, alongside its stated ISO:27001 certification, SOC 2 Type 2 compliance, GDPR and CCPA compliance."
---

# Health matters: Store and process healthcare data in a HIPAA-compliant manner using Intercom

[Intercom](https://yomu.fyi/company/intercom) · Niamh Young · Mar 25, 2021

**Type:** Announcement

## Summary

Intercom announces that it has completed a HIPAA attestation examination covering how it stores and processes health-related data, including protected health information (PHI) and electronic protected health information (ePHI). The examination was performed by an independent Certified Public Accounting firm, which reviewed HIPAA policies, procedures, and controls against the HIPAA Security Rule and HITECH Breach Notification Rule requirements. Intercom says the result allows it to enter Business Associate Agreements with applicable healthcare customers and make the attestation report available for review. Reported customer metrics include a 90% median CSAT score, 36% automatic resolution of common healthcare questions, and more than 500k healthcare conversations powered daily. Intercom also says it will perform the examination annually, alongside its stated ISO:27001 certification, SOC 2 Type 2 compliance, GDPR and CCPA compliance.

## Context

The COVID-19 pandemic accelerated healthcare’s shift toward online channels, digital transformation, and technology-assisted workflows. Healthcare organizations need to support patients and customers while safeguarding protected health information and electronic protected health information under applicable standards.

## Approach / What changed

Intercom completed an independent HIPAA attestation examination covering its HIPAA policies, procedures, and controls. The report addresses the HIPAA Security Rule and HITECH Breach Notification Rule, and Intercom can enter Business Associate Agreements with applicable healthcare customers while committing to annual examinations.

## Takeaways

- Applicable healthcare customers can enter into Business Associate Agreements with Intercom and request access to the HIPAA attestation report through Sales or an account manager.
- Intercom reports a 90% median CSAT score for healthcare organizations, automatic resolution of 36% of common healthcare questions, and more than 500k healthcare conversations powered daily.
- The HIPAA attestation report is part of a security program that also includes ISO:27001 certification, SOC 2 Type 2 compliance, GDPR, and CCPA compliance.

**Tags:** [Compliance](https://yomu.fyi/topic/compliance), [Privacy](https://yomu.fyi/topic/privacy), [Security](https://yomu.fyi/topic/security)

- Source: [Intercom](https://www.intercom.com/blog/intercom-hipaa-2021)
- Source URL: https://www.intercom.com/blog/intercom-hipaa-2021
- Ingested by Yomu: 2026-09-09T08:21:53.455Z

[Read original post](https://www.intercom.com/blog/intercom-hipaa-2021)