Skip to content

Commit ffc1064

Browse files
committed
Making changes requested by legal [netlify-build]
1 parent 8562efd commit ffc1064

File tree

1 file changed

+9
-2
lines changed

1 file changed

+9
-2
lines changed

src/privacy/hipaa-eligible-segment.md

Lines changed: 9 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -22,6 +22,13 @@ Ensure your Workspace is eligible for HIPAA before you configure and send any pe
2222
With the BAA signed and Workspace confirmed as eligible, you can start building. For more information about starting a HIPAA compliant implementation, see Twilio's [Architecting for HIPAA on Twilio](https://twil.io/architecting-for-hipaa){:target="_blank"}, which outlines the shared responsibilities and requirements for building and maintaining HIPAA-compliant workflows in Segment.
2323

2424
## HIPAA Auditing
25-
Segment maintains audit logs of every read and update action a user performs in the Segment app that may or may not involve PHI/PII. These logs can be provided upon request.
25+
Segment maintains audit logs of every read and update action a user performs in the Segment app that may involve PHI/PII.
2626

27-
For specific requests, please reach out to [[email protected]](mailto:[email protected]){:target="_blank"}.
27+
Data captured in the HIPAA audit logs includes:
28+
- `workspace_id`: unique identifier of the workspace
29+
- `actor_user_id`: unique identifier Segment assigns to the logged in user
30+
- `event_type`: The action performed by the user. For example, `Source Debugger Raw Viewed`, `Destination Filter Modified`, or other events
31+
- `end_user_id`: Segment sometimes assigns this unique identifier to an end-user, event, audience, or journey, depending on the event type
32+
- `timestamp`: Time, in UTC, when the action occurred
33+
34+
These logs can be provided upon request. For specific requests, please reach out to [[email protected]](mailto:[email protected]){:target="_blank"}.

0 commit comments

Comments
 (0)