Preservica adds independent HIPAA review to healthcare archiving program

Preservica said it has strengthened its HIPAA compliance program with an independent assessment of its security and privacy safeguards, aimed at healthcare, university medical centers and state agencies storing electronic protected health information. The move is meant to give customers added confidence as they preserve patient records for long-term access, audits, research and legal needs.

Why it matters: - Preservica is targeting healthcare organizations that need to store electronic protected health information, or ePHI, for years or decades. - The independent assessment is meant to add confidence for customers weighing long-term retention, compliance and record access. - The program is relevant for healthcare organizations, university medical centers and state Health and Human Services agencies. - HIPAA compliance also depends on both the customer and Preservica signing a Business Associate Agreement.

What happened: - Preservica said on Oct. 8, 2026, that it strengthened its HIPAA compliance program with an independent assessment of its HIPAA Security and Privacy safeguards. - A leading cybersecurity and compliance firm conducted the assessment. - Martyn Simpson, Preservica’s CISO, said the company’s HIPAA-ready archiving and Active Digital Preservation platform protects long-term ePHI, research and business records while keeping them readable over decades. - Simpson said the platform helps organizations respond to Release of Information requests, malpractice claims, regulatory audits, major investigations and research use cases.

The details: - Preservica says its platform can help healthcare organizations decommission legacy systems while keeping patient records accessible over decades for continuity of care and malpractice defense. - The platform is intended to reduce cost and clutter by moving inactive patient records and large files to lower-cost preservation storage. - Preservica says the system can securely retain ePHI for research and long-term value. - Preservica says Release of Information requests can move from manual multi-day retrievals to one-click search for instantly viewable records. - Core safeguards include encryption at rest and in transit. - The platform uses data immutability and integrity controls so files cannot be altered or deleted after ingestion without two-stage authorization. - Each file is fixity checked, and regular integrity reports are run to help prevent corruption or tampering. - The system supports multi-factor authentication and granular, role-based access permissions. - Customer immutable audit trails track who viewed which folders and assets and when, for Entity Access Reporting. - Retention management and legal hold controls enforce records governance across the archive, including defensible disposition actions. - Files are automatically maintained in readable and actionable formats over decades. - Preservica runs HIPAA-specific staff training, policies and risk assessments. - Preservica’s FAQ says the U.S. Department of Health and Human Services and its Office for Civil Rights do not endorse a formal HIPAA certification. - The FAQ says HIPAA compliance is demonstrated through administrative, physical and technical safeguards for ePHI. - The FAQ says an independent HIPAA assessment provides an objective review of a provider’s safeguards by an outside cybersecurity and compliance organization. - Preservica included links to contact the company and to learn more about Active Digital Preservation.

Between the lines: - Preservica is using the assessment as a trust signal in a market where healthcare buyers want evidence of compliance, not just product claims. - The emphasis on long-term readability suggests the company is positioning archiving as an operational workflow, not a passive storage layer. - The BAA requirement underscores that HIPAA readiness in practice still depends on shared responsibility between the vendor and customer.

What's next: - Preservica is inviting customers to contact the company to sign a BAA, book a demo or request a quote. - The company is also directing buyers to its Trust Center for HIPAA safeguards documentation. - Preservica is continuing to promote its Active Digital Preservation platform for healthcare and other long-term records use cases.

The bottom line: - Preservica is trying to turn HIPAA compliance into a stronger sales advantage by pairing independent review with long-term digital preservation capabilities.