Security & Compliance

MindBill is built and operated by IncidentFox, Inc., a small team, for California workers’-comp med-legal billing. We follow HIPAA-aligned practices. A Business Associate Agreement (BAA) is available on request — we sign one with each client.

Infrastructure

Hosted on AWS in the US (us-west-2 region)
ECS Fargate application tier with a managed PostgreSQL database
Reached only through an authentication-gated load balancer

Encryption

TLS for all data in transit
Encryption at rest for the database and stored files

Access control

Role-based access: admin, manager, biller, member, viewer
Authority is checked per-permission, not per-role name
Admins create users and relay a one-time temporary password / set-password link

Audit logging

Key actions are recorded with the actor stamped server-side from the session
Covers bill, payment, task, and record changes (create / edit / send / post / void, IBR filings, and more)

Migrating to MindBill

You export your data from your previous billing system and we import it into MindBill. Your previous system keeps running in parallel during the transition as a safety net — nothing is shut off until you’re ready.

Questions or to request a BAA: email support@mindbill.org.

Legal: Terms of Service · Privacy Policy · Business Associate Agreement (template)