HIPAA Compliance & Privacy Notice
Effective Date: 28-February-2026
Coraclaim is a healthcare administrative services brand of Corabase LLC, a United States limited liability company.
This page explains how Coraclaim complies with the Health Insurance Portability and Accountability Act of 1996 (HIPAA) when providing medical billing and revenue cycle management services.
1. Our Role Under HIPAA
Coraclaim operates as a Business Associate to healthcare providers (“Covered Entities”).
We do not provide medical treatment or clinical services.
We provide administrative medical billing and revenue cycle management services only.
When handling Protected Health Information (PHI), we do so strictly under executed Business Associate Agreements (BAAs) with healthcare providers.
2. Protected Health Information (PHI)
PHI may include:
Patient demographic information
Insurance information
Billing and claims data
Payment information
Treatment-related billing details
Coraclaim processes PHI solely for the purpose of performing contracted billing services.
3. Safeguards We Implement
We maintain administrative, technical, and physical safeguards designed to protect PHI, including:
Administrative Safeguards
Workforce training on HIPAA compliance
Confidentiality agreements
Access control policies
Risk assessments
Incident response procedures
Technical Safeguards
Role-based access controls
Multi-factor authentication
Secure system access
Data encryption where applicable
Audit monitoring
Physical Safeguards
Restricted system access
Secure device usage policies
4. Offshore Operations Disclosure
Coraclaim may utilize trained administrative personnel located outside the United States to perform billing-related services.
When offshore staff are engaged:
Access is restricted to authorized personnel
HIPAA confidentiality agreements are enforced
Secure systems and controlled environments are used
Oversight and compliance protocols are maintained
All offshore access is governed by contractual and compliance safeguards.
5. Permitted Uses of PHI
We use PHI only to:
Submit insurance claims
Perform billing follow-ups
Manage accounts receivable
Resolve denials
Generate billing reports
Perform contracted administrative functions
We do not use PHI for marketing, resale, or unauthorized purposes.
6. Disclosure of PHI
We may disclose PHI only:
As permitted under a Business Associate Agreement
As required by law
As instructed by the Covered Entity
We do not disclose PHI for independent commercial purposes.
7. Data Breach Notification
In the event of a confirmed data breach involving PHI:
The Covered Entity will be notified without unreasonable delay
We will cooperate fully in required investigations
Corrective actions will be implemented promptly
Breach notification procedures are governed by contractual agreements and applicable law.
8. Patient Rights
Patients’ rights regarding PHI (including access, amendment, and accounting of disclosures) are managed by the Covered Entity (the healthcare provider).
If you are a patient with questions regarding your medical information, please contact your healthcare provider directly.
9. Compliance Commitment
Coraclaim is committed to maintaining compliance with applicable US healthcare privacy laws and regulations when operating as a Business Associate.
We continuously review and update our administrative and technical safeguards as appropriate.
10. Contact Information
For HIPAA-related inquiries:
Coraclaim
A brand of Corabase LLC
Email: contact@coraclaim.com
Website: www.coraclaim.com