ACO DME
Security
ACOs trust us with claims data, so we keep access narrow and simple. This page explains how the portal is protected and how to tell a real message from us.
Who can get in
- There is no public sign-up. Every account starts from an invitation our team sends to a named person at a client organization.
- Each organization’s users see only that organization’s data.
- Client staff and our own team sign in through separate pages, and team access is granted by an administrator.
- Client organizations can ask us at any time to remove someone who no longer needs access.
How data is handled
- All traffic to the portal is encrypted with HTTPS.
- The portal runs on established cloud hosting and database providers, with access to production systems limited to our team.
- Claims data is used only to provide the service to the organization that shared it. We do not sell data.
- Sample and demonstration data used in training is synthetic and is not real patient information.
Recognizing real messages from us
- We will never ask for your password by email, text or phone.
- Invitations link only to this site. If a message asks you to sign in somewhere else, don’t.
- If you are unsure whether a message is from us, email ben@hbmedicalsupplies.io before clicking anything.
Reporting a concern
If you think an account has been misused, or you have found a security problem, email ben@hbmedicalsupplies.io with “Security concern” in the subject. We will respond promptly.