HIPAA Compliance
The Android version of the Zoho CRM is HIPAA compliant. HIPAA, the Health Insurance Portability and Accountability Act, is a law that makes specific requirements for protecting sensitive health information from being disclosed without the patient's consent or knowledge.
In order to remain HIPAA compliant, the Zoho CRM app contains the following data restrictions:
Restriction of data transfer to Zoho apps
If an Email field is configured as a personal field, then the Name field values will be transferred to the Zia search app instead of email addresses. This is only supported for the Leads, Contacts, and Accounts modules.
Restriction of data transfer to third-party apps (Android speech recognition)
Users can only use Zia Chat, not Zia Voice.
Restriction in data export
The values of personal fields (such as Email, Phone, or Address) which are marked as Health or Personal data using the web version of Zoho CRM will not be included when exporting records from the Contacts and Leads modules.
Note:
HIPAA compliance must be configured in the web version of Zoho CRM.
Personal or health fields of records are only displayed in the Data Privacy view. This is supported for the Leads, Contacts, Accounts, Vendors, and custom modules.
Data Encryption
Data encryption is a way to safeguard personal or sensitive information like credit card details, backup phone numbers, and personal identification numbers that are stored in your CRM database. It prevents the data from being stolen or lost by converting the plain (readable) text into cipher (non-readable) text that can only be accessed by authorized parties. Even if a potential hacker gets hold of the data, they will not be able to read or decode the information stored as cipher text.
In Zoho CRM, you can encrypt custom fields using AES. Encrypting the data does not impede effective and quick use of Zoho CRM by authorized users.
To enable or disable data encryption
1. Log in to your Zoho CRM app.
2. Tap the icon, and tap Settings.
3. Tap Privacy and Security Settings.
4. Toggle Encrypt data in this device to enable or disable encryption.