HIPAA Compliance Notice

Last updated: September 2026

Xpert Billing Services Inc acts as a Business Associate under the Health Insurance Portability and Accountability Act (HIPAA) for the medical practices we serve. This means we are contractually and legally obligated to protect the Protected Health Information (PHI) our clients share with us for billing, coding, and revenue cycle management purposes. This page explains how we approach that responsibility.

Business Associate Agreements

Before we handle any PHI for a client, we execute a Business Associate Agreement (BAA) that defines the permitted uses of PHI, our security obligations, and breach notification requirements consistent with the HIPAA Privacy and Security Rules. If any subcontractor or software vendor we use also touches PHI, we require a BAA with them as well.

How We Safeguard PHI

Administrative Safeguards

Workforce HIPAA training, role-based access limited to what each biller needs for their assigned accounts, and a designated privacy point of contact.

Technical Safeguards

Encrypted transmission of claims and PHI, secure login credentials for all systems, and activity logging on billing platforms we access.

Physical Safeguards

Secure workstations for our US-based staff and controls around remote access to client systems and clearinghouses.

Breach Notification

In the event of a suspected breach involving PHI we handle, we notify the affected practice promptly in accordance with HIPAA's breach notification timelines.

Working In Your Existing System

Because our billers typically log into your existing EHR, practice management system, and clearinghouse rather than migrating your data elsewhere, PHI generally stays within the security environment you've already vetted and configured — we adapt our access to your system's existing safeguards rather than asking you to trust a new platform.

Note on this website: The forms on xpertbillingsvcs.com are for initial inquiries only and are not intended for transmitting PHI. Do not include patient names, dates of birth, or other identifiable patient information in a website contact form. Once you're a client, PHI is exchanged through the secure channels defined in your BAA.

Questions About Our HIPAA Practices

If you're evaluating us as a billing partner and have specific questions about our security practices, data handling, or BAA terms, we're glad to walk through them on a call before you commit to anything.

Xpert Billing Services Inc
420 Columbus Ave, Valhalla, NY 10595
Phone: 914-449-6970
Email: info@xpertbillingsvcs.com