Compliance
Privacy & Data Protection Statement
Last updated October 2026
What this covers
Care Automation Solutions, LLC provides denial recovery and prior authorization services to specialty groups. This statement explains how we handle the information involved, and how we handle what you share with us through this website.
Information we handle
To do our work we use billing, claims, and remittance data, and prior authorization information, provided by our customers or accessed in their practice management (PM) and EHR systems. This can include Protected Health Information (PHI) such as patient names, dates of service, insurance details, and claim and payment records.
How we use it
Only to provide the services described in the customer’s agreement with us. We do not sell, rent, or share patient information with third parties for their own purposes, and we do not use it for marketing or advertising.
HIPAA and Business Associate Agreements
We sign a HIPAA Business Associate Agreement (BAA) with our customers. The BAA governs our handling of PHI, and controls if it conflicts with anything in this statement.
Access and security
Access to our systems uses multi-factor (MFA) logins. We work inside your existing systems rather than moving your data into new ones: your clearinghouse stays in place, and payer payments stay in your bank.
Retention
We keep information only as long as needed to provide the services, to meet legal obligations, or as set out in your agreement.
This website
If you contact us by phone, email, or our request form, we use what you share only to respond to you. The request form is hosted by Google Forms, so what you enter there is also processed by Google under its own terms. Please do not include patient information in the form or in email.
Questions about this statement: hello@careautomation.io · (253) 444-7370