Got a question?
No problem.

ChartSwap is a fast, simple and secure business-to-business (B2B) record exchange platform – connecting a rapidly expanding network of requestors and providers. Our mission is to revolutionize the way personal health information (PHI) is transmitted, improving efficiency and reducing costs on both sides of the record retrieval process.

The ChartSwap platform simply and securely facilitates the exchange or transmission of healthcare and billing records by making the process fast and easy.

• A requestor (law firm, record retrieval vendor, insurer, etc.) uses ChartSwap to request records.
• The receiving provider reviews the request and determines whether it can provide the records.
• If the provider chooses to provide the records, it uploads them into the ChartSwap platform.
• After the provider uploads the records to ChartSwap, the requestor is notified of records being available to purchase.
• The requestor uses ChartSwap to pay the custodian fee and download the records.
• ChartSwap then transfers the custodian fee to the provider of the records.

ChartSwap does not use patient records. It provides a platform for requestors and providers to exchange patient records. ChartSwap will only access patient records for a limited number of reasons, such as when it is necessary by law or for a customer service purpose.

Yes, ChartSwap meets HIPAA guidelines for compliance in our policies and technical safeguards. ChartSwap is built on the SalesForce.com platform, recognized as having a leading security infrastructure with world-class physical, administrative and technical security safeguards.  We also have comprehensive information security and privacy policies. Through our advanced event monitoring, ChartSwap administrators receive detailed reports accounting for every action that occurs on the system. For more information, please visit our Security page.

ChartSwap servers securely store a copy of the files temporarily, allowing requestors up to 90 days to download the records after they have purchased them. ChartSwap is not meant to serve as permanent storage, but only a means of securely transferring files from one entity to another.

It’s simple: We don’t.
ChartSwap only provides a secure online platform for requestors and providers to exchange patient records. ChartSwap will only access patient records for a limited number of reasons, such as when it is required by law or in the process of fulfilling a customer service request.

General Data Protection Regulation (GDPR) is intended to establish one single set of data protection and privacy rules across Europe.  The GDPR seeks to increase citizen awareness – in the EU as well as across the globe – of how and why their data is being used. The new law lays out sweeping changes regarding the rights of a “data subject,” or a citizen who has his or her data processed.

For instance, a data subject must be aware that their data is indeed being processed under the new law, and the legislation forces companies to articulate that fact in plain language, so there’s no room for misunderstanding.  Data subjects also have a right to know why the data is being processed, to have access to the information in question and to have the ability to have it erased. In addition, the GDPR forces companies to notify supervisory authorities of a data breach within 72 hours of the incident.

Citizens affected by the breach should be notified “without undue delay,” according to the regulation.  The GDPR applies to any company, located anywhere in the world, that processes the data of EU citizens. The legislation is not exclusive to the European Union.