Home Security & Privacy
Security and Privacy
How records reach us, who can open them, and what we will not claim.
How Records Reach Us
We operate under HIPAA, and we keep the trip boring on purpose: one encrypted door, a signed agreement, and a named person accountable at every step. The request form on this site carries case details only, never the record set.
- You Describe the Matter First. The request form asks about the case and the parties, never for the records themselves.
- We Sign Before Anything Moves. The Business Associate Agreement comes first; no record travels until both signatures land.
- An Encrypted Link Carries the Records. Your confirmation holds the upload link, and we recommend that channel for anything touching patient care.
- Only the Matter Team Opens the File. Staff assigned to your case can open the records. No one else holds a key.
- Retention Follows the Rules, Then Ends. California record rules and the executed agreements set how long we hold the file. When that period ends, so does our copy.
On a breach of unsecured protected health data, we notify the parties named on the executed Business Associate Agreement, as HIPAA requires.
No Certifications
What We Do Not Claim
HIPAA certification does not exist. When a vendor claims otherwise, ask for the report, the auditing firm, and the covered period. Any formal attestation we earn appears here with a date.
- No SOC 2 Report
- No HITRUST Certification
- No ISO 27001 Certification
- No "HIPAA Certified" Badge
- No Government Accreditation
- No "Unbreachable" or "Military Grade" Language
Report a Concern
Tell Us When Something Looks Wrong
Write to admin@pacificmedicallegal.com or call (310) 499-4339. Please leave records out of the message body; a case number and a call-back number are enough.
Also on This Site
Reviewed July 22, 2026. The executed agreements between us govern.
Questions Before You Send Anything?
Send your due diligence questionnaire; we complete and return the answers before any record moves.