View source for HIPAA custom feature/en

<languages/>

{{#seo:
|title=Custom Features - SimplyBook.me
|titlemode=append
|keywords=faq, frequently asked questions, booking software, appointment system questions, appointments online, calendar software, booking system, booking calendar, scheduling software, online appointment scheduling, online scheduling, plugins, custom features, additional functionality, hipaa, medical, 2-step authentication, 2-step auth, secure access, protect sensitive data
}}


<br>
[[File:Hipaa new icon.png ‎|left]]
<br>
Available with Standard and Premium(former Gold and Platinum) subscriptions.
<br><br>
The personal information custom feature is designed to help [https://simplybook.me SimplyBook.me] users to protect their client's and patient's data. It does not replace user's own security procedures but enhances [https://simplybook.me SimplyBook.me] data security by using double authentication during login process for all users who access the system (users need to register their mobile phone number to receive authentication code SMS(you need SMS credits for this) or connect [[Special:MyLanguage/Custom_Features#Google_Authenticator | Google Authenticator]] using corresponding custom feature). This custom feature includes a “Timeout” setting which automatically logs user out to reduce the risk of unauthorized users accessing the system.<br>
The system blocks all access for [https://simplybook.me SimplyBook] support personnel further reducing access by unrelated people to the system. It is possible to further reduce exposure of personal information to unauthorized people by using the [[Special:MyLanguage/Custom_Features#Clean_History | Clean History custom feature]]. This way old data gets deleted and is therefore not accessible. <br><br>
'''Please note!''' 
*This custom feature does NOT replace the [https://simplybook.me SimplyBook.me] user's own security controls which also need to be in place for client and patient data protection. Please refer to relevant documentation in your country and get assistance from qualified advisors in the field of client/patient data protection.
*[service] and [client] variables in notification templates do not work when this Custom Feature is enabled due to security reasons.
*It is not possible to connect the account to [[Special:MyLanguage/Custom_Features#Zapier_Connector | Zapier]] if you are using HIPAA feature.
*It is not possible to use HIPAA with [[Special:MyLanguage/API custom feature|API custom feature]].
*This custom feature cannot be enabled without [[Special:MyLanguage/Google_Authenticator_custom_feature| Google Authenticator custom feature]].
<br><br>
;How to use
:1. Enable HIPAA features on your Custom Features page.
:''When you enable this feature [[Special:MyLanguage/Custom_Features#SSL| SSL custom feature]] and [[Special:MyLanguage/Custom_Features#Google_Authenticator | Google Authenticator]] will be enabled as well to add security to client side.''
[[File:Hipaa enable path new cf.png | center]]
<br><br>
:2. Go to its settings on the right to set timeout period and email address to be notified about new log ins.
[[File:Hipaa settings path new cf.png | center]]
<br><br>
:3. Add phone numbers for your users in Manage//Users//select the user//User details.
[[File:Add phone for admin.png|1200px|border|center]]
<br><br>
:4. Set up and validate main admin Google Authenticator in Manage//Users//select the user//Google Authenticator.<br>
:(download the app to your phone from Google Play or App Store if you do not have it yet,<br>
:scan QR-code with Google Authenticator application on your smartphone, enter the code you see in the app and click on "Connect" button.)
[[File:Connect ga to user v3.png|border|center]]
<br><br>
:5. Validate main admin phone number to have a backup tw-step authentication method.
<br><br>
;How to validate phone number
:1. Please navigate to Manage//Users//main admin user//User details.<br>
:Click on "Generate a check-code to validate phone" button under the phone number field.
[[File:Hipaa validate phone v3.png | center]]
<br><br>
:2. You will receive sms with the code, enter the code into the "Validation code" field and press "Confirm the check-code".
[[File:Hipaa confirm code.png|center]]
<br><br>
:3. Get a success message that the code is confirmed.
[[File:Hipaa validated number.png | center]]
<br><br>
:As a one more backup method you can download the file with one-time codes for two-step authentication in "Google Authenticator" tab on Manage//Users page.
[[File:Add 2fa backup codes.png|1200px|border|center]]
<br><br><br><br>