01. Cloud Infrastructure & Database Architecture (Firebase)
Indiquer RCM's web application and real-time consultation intake infrastructure are engineered on Google Cloud Platform and Firebase (Project ID: indiquerrcm).
- Google Firebase Firestore: Secure, high-availability NoSQL database utilized for storing authenticated consultation inquiries, client feedback, and data subject deletion tickets. All payloads are encrypted in transit via TLS 1.3 and at rest with AES-256 keys.
- Cloud Storage: Encrypted object storage bucket (
indiquerrcm.firebasestorage.app) for secure intake documents, protected under strict security rules. - Cloudflare CDN & DNS: Edge caching, DDoS mitigation, and SSL/TLS edge termination to safeguard site availability.
02. Accredited Healthcare Clearinghouses & EDI Gateways
To process insurance claims, eligibility checks, and Electronic Remittance Advice (ERA), Indiquer RCM establishes secure BAA conduits with nation-wide accredited clearinghouses:
- Availity Essentials & Gateway: Real-time EDI 270/271 eligibility queries and commercial claim submissions.
- Change Healthcare (Optum): Institutional and professional claim scrubbing (EDI 837P/837I) and payer remit downloads.
- Waystar Revenue Management: Denial appeal tracking, claim status checks (EDI 276/277), and clearinghouse analytics.
03. Web Analytics & Diagnostic Telemetry
We monitor marketing site health and traffic metrics through strictly anonymized tools:
- Google Analytics 4 (GA4): Analyzes page traffic flows and bounce rates. Global IP masking is enforced; no patient identifiers or billing data are ever shared with Google Analytics.
- Google Tag Manager: Orchestrates firing of approved consent-aware scripts in accordance with user cookie choices.
04. Payment Gateways & Banking Processors
For commercial software subscriptions, credentialing fees, and client billing:
- Stripe, Inc.: PCI-DSS Level 1 certified gateway handling credit card tokenization and automated subscription invoicing. Indiquer RCM does not store unencrypted credit card numbers on its servers.
- PNC Bank / ACH Direct Debit: Secure electronic funds transfer conduit for client contingency fee settlements.
05. CRM, Support & Communication Channels
- Corporate Telephony: Direct US voice communications (+1 469-577-1619) for operational support and onboarding.
- Google Workspace / Google Maps: Corporate email routing (indiquer@indiquerrcm.com) and office geocoding embeds.
- YouTube & Vimeo: Embeds of clinical documentation webinars and product overviews configured with privacy-enhanced mode.
06. Itemized Sub-Processor Registry
| Vendor / Service | Jurisdiction | Data Exchanged | HIPAA BAA Status |
|---|---|---|---|
| Google Cloud / Firebase | United States | Form leads, consultation tickets, server logs | Active BAA |
| Change Healthcare / Optum | United States | EDI 837 claims, 835 remittances, PHI | Active BAA |
| Availity LLC | United States | EDI 270/271 eligibility data, claim status | Active BAA |
| Waystar, Inc. | United States | Medical claim files, appeals records | Active BAA |
| Stripe, Inc. | United States | B2B billing details, corporate credit cards | PCI-DSS Level 1 (Non-PHI) |
| Cloudflare, Inc. | United States / Global | IP addresses, network traffic telemetry | DPA Executed (Non-PHI) |
To request a copy of our third-party vendor security assessment reports or executed Business Associate Agreements, email our security compliance desk at security@indiquerrcm.com.