Security & Privacy Policies

Epic takes very seriously its obligation to protect the confidentiality of your personal information. Epic develops many applications for healthcare providers and other healthcare-related staff end users. These apps include Haiku, Canto, Rover, Limerick, and Hyperspace, among others, and they are intended to connect to servers and systems operated and maintained by Epic community members in order to provide you secure and, if applicable, mobile access to those systems.

This Privacy Policy

This Privacy Policy describes how Epic Systems Corporation’s (“Epic”) applications for providers and other healthcare-related end users (our “Applications”) use, store, and transmit information and data. Epic may modify this Privacy Policy at any time effective upon its posting. Your use of our Applications is subject to the of the applicable Applications’ End User License Agreement.

When you use our Applications, Epic does not receive any personal data directly from you or your device. As described below, our Applications connect with systems operated and maintained by a healthcare institution that uses Epic’s software.

Connections to Healthcare Institutions

To use our Applications, you must have an account with a healthcare institution who uses Epic’s software. Your use of our Application with that healthcare institution may be subject to that healthcare institution’s policies and terms. You understand that while connected or attempting to connect to a healthcare institution’s system, the healthcare institution may collect, store, process, maintain, upload, sync, transmit, share, disclose, and use certain data and related information, including but not limited to information or data regarding the characteristics or usage of your device, system and application software, and peripherals as well as your personal information, location data, and other content.

Please contact your employer or other entity that providers your access to our Applications if you have any questions about their policies or terms.

Using Third Party Tools and Features

If you use any third-party tools and features, such as third-party speech-to-text dictation or third-party video, your use of those features is subject to the terms and policies of those third parties. If you have any questions about those terms or policies, you should contact your healthcare institution or the provider of the third-party tool.

The security of your information and data while using our Applications is very important to us. Our Applications employ a variety of technical safeguards to protect the confidentiality, integrity, and availability of your personal information including supporting Transport Layer Security (TLS)/Secure Sockets Layer (SSL) certificate technology and encryption.

In addition, healthcare organizations with whom you connect may use a variety of physical, administrative, and technical measures to protect your personal information.

Your California Privacy Rights

If you are a California resident, California law may provide you with additional rights regarding our use of your personal information. To learn more about your California privacy rights, visit our CCPA privacy notice for California residents or contact your healthcare institution.

If you have questions about medical information in an account with a healthcare organization using Epic’s software, please reach out to your healthcare organization using the contact information in their privacy policy.

If you have any questions about this Privacy Policy, you may contact Epic at 608-271-9000 or at PrivacyInquiries@epic.com.

If you need to contact Epic’s Data Protection Officer or EU Representative as defined by the General Data Protection Regulation, (EU) 2016/679 (“GDPR”), please email EUPrivacyInquiries@epic.com or call +1 608-271-9000. If you are a Data Subject as defined by GDPR, you should reach out to your healthcare organization for requests related to your personal data accessed through our Applications.