12 Key Questions to Ask Before Sending HIPAA-Compliant Marketing Emails

HIPAA Compliant Email, HIPAA Email Marketing
LuxSci
October 30, 2024

So – you’ve just been told that your email marketing program is putting your company at risk of violating HIPAA.

Ok. What now?

If you want to continue your email-based patient engagement efforts – without the risk of the financial, operational, and reputational risk that accompanies the exposure of sensitive patient data, you must implement HIPAA compliant email marketing practices.

This is comprised of two components: becoming HIPAA-compliant, setting up the required systems and procedures to ensure your PHI (PHI) and EPHI (EPHI) are protected, and your marketing objectives, who you want to reach and what to communicate.

However, you don’t have to let your marketing objectives suffer for the sake of security.

Implementing a HIPAA-compliant marketing program can actually help you achieve better marketing results.

Asking yourself these 12 questions ensures your email marketing campaigns align with your business goals and are HIPAA-compliant.

———

HIPAA-Compliant Marketing Emails

1. Do you have security controls to protect access to your email marketing system?

2. Do you have a documented procedure to guide you HIPAA-compliant email marketing?

3. Can you send encrypted emails?

4. Do you have a complete understanding of your organization’s PHI and ePHI?

5. Do you have a required training process for anyone sending HIPAA-compliant marketing emails?

6. Do you have effective protection against malware?

7. Do you have valid Business Associate Agreements (BAA) in place?

8. Why am I sending this email?

9. Is my email’s subject line standing out?

10. What is the recipient’s brand and product awareness level?

11. Have I tested my message for readability?

12. Have I sent my message to a test email account?

HIPAA-Compliant Marketing Emails

If your organization requires HIPAA-compliant email, start by using these questions to inspect your email marketing for compliance. Note that while we can’t provide legal advice, the below questions will help you identify some of the most common points of vulnerability and non-compliance.

1. Do you have security controls to protect access to your email marketing system?

Email security is an essential component of being HIPAA-compliant. As a starting point, check your internal security processes for access restrictions. This includes:

A robust password policy, i.e., changed frequently (e.g., 30 days), has to contain a mixture of characters, etc.
Multi-factor authentication (MFA), i.e., users verifying their identity in multiple ways, e.g., username/password and sent number codes (text, email, key fob, etc.), biometrics, etc.
Role-based access controls, i.e., granting access to individuals based on the responsibilities of their job role.
Zero Trust Architecture (ZTA), i.e., “never trust, always verify” – where users are required to reconfirm their identity on a case-by-case basis, as opposed to once when logging on, which mitigates session hijacking and similar threats.

2. Do you have a documented procedure to guide you HIPAA-compliant email marketing?

“Winging it” simply doesn’t cut it when it comes to HIPAA-compliant email marketing; you must develop a comprehensive documented process detailing how you intend to safeguard PHI throughout your email marketing campaigns.

This should include:

Specifying the HIPAA-compliant email delivery service you’ll use to execute your marketing campaigns

The processes and controls you’ll use to encrypt data for ePHI at rest and in transit

The access and authentication controls you have in place

How you’ll implement data minimization: only using the minimum necessary PHI in communications – and not including sensitive PHI unless it’s essential.
How you’ll securely dispose of data: Implement a process for securely deleting emails containing ePHI once they’re no longer needed, to comply with retention policies.
Staff training: educating employees involved in email marketing on how to securely handle PHI and other HIPAA requirements.
Incident response plan, i.e., an additional documented plan for how you’ll respond to data breaches and other cyber attacks; this also includes notifying any affected parties as mandated by HIPAA.

If you’re starting from scratch, the information contained in the answers to the questions in this article provides a useful starting point for creating your first procedure.

3. Can you send encrypted emails?

If you are sending highly sensitive data or PHI in your emails, be aware that HIPAA requires the data to be encrypted a rest, i.e., the storage medium where it resides, and in transit, when being sent to recipients.

To the surprise of many healthcare organizations, most major email marketing providers, such as Mailchimp and Constant Contact are unable to provide encryption for data in transit and only protect data in their systems. To avoid falling foul of HIPAA regulations, ensure that the email delivery platform you use to transmit messages containing PHI offers end-to-end encryption.

4. Do you have a complete understanding of your organization’s PHI and ePHI?

Much of the time, when we, as well as healthcare providers, talk about PHI, we’re actually referring to electronic protected health information (EPHI). While PHI is a catch-all term to account for all sensitive health information, in truth, in the digital age, the vast majority is stored electronically in data centers – and the patient data handled is EPHI.

You can discover “PHI” and “ePHI” within the context of your organization’s context by identifying and categorizing the PHI and ePHI typically handled in your business. It’s an absolutely crucial tenet of data protection that you simply can’t protect what you’re not aware of.

Comprehensive PHI categorization will help your staff navigate HIPAA-compliant email requirements.

5. Do you have a required training process in place for anyone sending HIPAA-compliant marketing emails?

Your HIPAA compliance program, as with your company’s overall cybersecurity posture, is only as strong as your weakest link. In light of this, it’s essential to educate the staff within your company who are involved in your healthcare engagement campaigns on the secure use of ePHI and HIPAA-compliant marketing practices.

Additionally, this needs to be reflected in your onboarding process, so new hires are made familiar with HIPAA regulations, should their role require it.

6. Do you have effective protection against malware?

In the unlikely event you need any further encouragement to revisit your company’s anti-malware (viruses, ransomware, Trojans, etc.) measures, there are always HIPAA compliance requirements!

To better protect your sensitive customer data against a slew of increasingly sophisticated cyber threats, start with these three key considerations:

Do you have anti-malware protection running on all of your organization’s devices? Additionally, does this extend to your employee’s personal devices on which they handle PHI?
How frequently do you update your anti-malware solution?
Does your email marketing provider have sufficient protection malware mitigation measures in place, as per HIPAA requirements?

7. Do you have valid Business Associate Agreements (BAA) in place?

It’s normal to outsource activities like email marketing to a third party, but for the service they provide to be HIPAA-compliant, you must have a business associate agreement (BAA) in place.

A BAA documents how two organizations will share PHI and under what circumstances. A BAA also details the legal responsibilities of each party in the event of a serious issue. With a BAA being a core component of HIPAA compliance, failure to have one in place with your email service provider is an immediate HIPAA violation – and one that can result in serious consequences for a healthcare company.

Getting Better Results from HIPAA-Compliant Email Marketing

Now that you’ve confirmed your systems are HIPAA-compliant, let’s move on to making sure your email marketing strategy aligns with your overall business objectives.

In pursuit of this, the following questions serve as a handy “monthly review” for refining the effectiveness of your email-based patient outreach efforts .

8. Why am I sending this email?

First and foremost, for the best results, each email you send should have a single, clearly defined purpose.

I know what you’re thinking – “my customers and patients are smart, they can handle multiple points in a single message.” And while that’s true, at whatever point your email reaches a recipient, they’re already juggling several different priorities at once. While they’re capable of juggling multiple points in a message – they’re unlikely to want to; when it comes to email marketing, a single goal is the best way to go.

Similarly, it’s important to remember that your email is one of dozens – or hundreds – received by your patient that day. So, if your message is long and overly complicated, the reader will likely skip over or delete it.

9. Is my email’s subject line standing out?

Following on the above point, is your email subject line impactful enough to stand out amidst the pile of messages that will land in the patient’s inbox that day? The email subject line is the most important part of your email because it’s responsible for persuading the reader to open your message.

Despite this, many marketers still use terrible, ineffective subject lines and wonder why their emails are failing to produce results!

For the best results, write up three to ten subject lines for your next email, step away for 5-10 minutes, and then choose the headline you determine as best.

Consider these examples to check your understanding:

Ineffective Email Subject Lines

Blank (no subject): writing nothing in the subject line
Clinic Newsletter (tell them more, e.g., the subject or theme for the month)
Overusing exclamation marks!!!

Effective Email Subject Lines (examples based on a dental practice)

BRAND-NEW Dental Product Released Today
How to Cut Down on Your Health Insurance Paperwork
[Case Study] How We Helped 3 Ex-Smokers Get White Teeth

10. What is the recipient’s brand and product awareness level?

Whether promoting medical devices, new digital solutions technology, or any healthcare product or service, understanding the prospect’s awareness level is essential.

If your email is designed to introduce a brand-new product, stick to high-level features and benefits while avoiding technical jargon and granular product details. Conversely, if you’re writing an email to experienced, highly knowledgeable readers, going into greater depth makes sense.

Advanced list management and segmentation tools, as offered by Luxsci Secure Marketing, are key for ensuring the communications you send match the reader’s awareness level.

11. Have I tested my message for readability?

Do you know one of the reasons that Hemingway was popular? He was skilled at writing short phrases and phrases. Consequently, his writing was easy to understand and appealed to a wide variety of people. When in doubt, keep your writing short and free of jargon, abbreviations and “insider” terms.

When you’re deeply involved in the details of your business, it’s so easy to overlook just how much specialized jargon and language you frequently use. However, if you want your communications to engage with patients and customers, they need to be as accessible as possible.

Fortunately, there are simple solutions to this, with tools like the Text Readability Calculator that are designed to quickly enhance the readability of your emails.

12. Have I sent my message to a test email account?

Finally, if you’ve followed all of the above advice, you’re almost ready to hit SEND…there’s just one more thing you need to check.

Determine how your email will look to recipients, including its clarity, and readability by simply sending a test email to one of your own email accounts once it is received.

In particular, pay attention to how the subject line looks and test all the links in the email to ensure they take the reader through to the intended destination, such as a product or service page. A broken link will only frustrate the recipient – who was interested enough to click through, no less – and lower your conversion rate.

Better still, send the test email to a colleague somebody and ask for their opinion about the quality of the message and whether it creates the desired impression.

Demystifying HIPAA-Compliant Email Marketing

As the most experienced HIPAA-compliant email provider, LuxSci specializes in providing secure and HIPAA-compliant solutions for companies aiming to send hundreds of thousands – or millions – of emails. Our hypersegmentation tools allow you to precisely target an unlimited number of patient sub-populations to maximize the efficacy of your messaging.

Are you interested in discovering how LuxSci’s secure email marketing platform will streamline your healthcare engagement efforts?

LuxSci

Get in touch

Find The Best Solution For Your Organization

Talk To An Expert & Get A Quote

First Name

Last Name

Work Email

Phone

Company

Type of Inquiry

Company Size

Message (optional)

Acceptance

I consent to be contacted by LuxSci for this inquiry and other relevant content, products, and services. You may unsubscribe from these communications at any time. We're committed to your privacy. For more information, check out our Privacy Policy.

A member of our staff will reach out to you

Search

Get Your Free E-Book!

LuxSci High Email Deliverability Best Practices Paper

What you’ll learn:

LuxSci Earns 19 G2 Spring 2026 Badges

March 23, 2026
Pete Wermter

LuxSci continues its strong performance in the G2 Spring 2026 Reports, earning 19 badges that reflect real customer satisfaction and consistent product excellence across multiple areas, including email encryption, HIPAA compliant messaging, email security and email gateways.

G2: A Highly Reputable Peer Review Platformn

In a crowded software landscape, it’s easy for bold claims to blur together. That’s where G2 stands apart. Its rankings are based entirely on verified user feedback, giving buyers a clearer picture of how solutions actually perform in day-to-day use, not just how they’re marketed.

For Spring 2026, LuxSci earned recognition across multiple categories, including Leader, Best Customer Support, and Best ROI. Together, these awards show that LuxSci delivers leading technology and a best-in-class customer experience.

What the Badges Represent

Each G2 badge reflects direct input from customers using LuxSci in real-world environments. These evaluations cover usability, onboarding, support responsiveness, and long-term value. LuxSci’s Spring 2026 badges span leadership, customer satisfaction, ROI, and ease of implementation, demonstrating consistent strength across the full customer lifecycle.

Leader Badge: Market Leadership Validated

The Leader badge is awarded to companies with high customer satisfaction and strong market presence. LuxSci’s placement reflects reliable performance, strong security, and continued trust from organizations operating in highly regulated environments like healthcare.

Best Customer Support: A Standout Strength

In secure healthcare communications, timely and accurate support is essential. Issues must be resolved quickly to avoid operational or compliance risks. Customers consistently highlight LuxSci’s fast response times, deep expertise, and a hands-on approach, showing that our technology and our people deliver meaningful, real-world solutions.

Best ROI: Proven Business Value

ROI includes reduced compliance risk, improved efficiency, and scalable operations, not just cost. Customers report measurable benefits from LuxSci’s reliability, built-in compliance, and streamlined workflows, leading to strong long-term value and a solution that keeps you ahead of security and compliance risks.

What This Means for LuxSci Customers

These awards show LuxSci’s ability to serve organizations of varying sizes, from mid-market to enterprise. All reviews are from verified users, ensuring authenticity and transparency. Customers consistently mention reliability, security, and responsive support, along with overall peace of mind. The recognitions validate LuxSci’s ability to deliver secure, dependable communication solutions backed by strong support, including HIPAA compliant email, marketing and forms.

LuxSci’s 10 G2 Spring 2026 badges—including Leader, Best Customer Support, and Best ROI—demonstrate consistent excellence across performance, usability, and customer satisfaction. These results reinforce its position as a trusted provider in secure communications.

Traditional MFA No Longer Qualifies as “Reasonable” Security

March 17, 2026
Pete Wermter

For years, multi-factor authentication (MFA) was considered one of the most effective ways to protect sensitive systems. By requiring a second verification step, such as a text message code or push notification, organizations could significantly reduce the risk of compromised passwords.

But the threat landscape has changed.

Today, attackers routinely bypass traditional MFA using techniques such as MFA evasion, token replay attacks, and consent phishing. These methods are no longer rare or highly sophisticated. They are widely used, automated, and increasingly effective.

As a result, regulators, auditors, and security frameworks are raising expectations for authentication security. For healthcare organizations in particular, traditional MFA alone may no longer satisfy the HIPAA requirement to implement “reasonable and appropriate safeguards.”

In the near future, email systems that rely only on basic MFA, without conditional access or phishing-resistant authentication, may increasingly be viewed as security gaps during risk assessments.

Why Traditional MFA Is No Longer Enough

Traditional MFA still improves security compared to passwords alone. However, many common MFA methods were designed before today’s phishing techniques and cloud authentication attacks became widespread.

Common MFA methods include:

SMS verification codes
Email-based authentication codes
Push notifications to mobile apps

While these mechanisms add friction for attackers, they can still be intercepted or manipulated during sophisticated phishing attacks. Because modern attackers now target authentication workflows directly, organizations relying solely on traditional MFA may be more vulnerable than they realize.

How Attackers Bypass MFA Today

Cybercriminals increasingly rely on tools that capture credentials and authentication tokens during login sessions. Three attack techniques are now especially common.

MFA Evasion and Phishing Proxies – Attackers frequently deploy adversary-in-the-middle phishing kits that sit between the user and the real login service. When users enter their credentials and MFA code on a phishing page, the attacker forwards the information to the legitimate site and captures the authentication session. The user successfully logs in—but the attacker gains access as well. If attackers capture those tokens, they can reuse them to access the account directly.
Token Replay Attacks – After successful authentication, systems typically issue session tokens that allow users to remain logged in without repeated MFA prompts. This technique has been widely observed in attacks targeting cloud email platforms such as Microsoft 365, allowing attackers to access email data even when MFA is enabled.
Consent Phishing – Consent phishing bypasses MFA entirely. Instead of stealing passwords, attackers trick users into granting permissions to malicious applications that request access to their mailbox or files. If users approve the request, the attacker’s application receives persistent access to the account through APIs—often without triggering security alerts.

Why Email Authentication Matters Most in Healthcare

Email remains one of the most critical systems in healthcare organizations. It supports patient communication, internal collaboration, and the exchange of sensitive information. Unfortunately, it is also the most frequently targeted entry point for cyberattacks.

Once attackers gain access to an email account, they can:

Impersonate healthcare staff
Launch internal phishing attacks
Access sensitive patient communications
Extract protected health information (PHI)

Because of this, email authentication controls are becoming a major focus for security teams and compliance auditors alike.

Evolving Regulatory Expectations

HIPAA does not prescribe specific technologies, but it requires organizations to implement safeguards that are “reasonable and appropriate” based on risk. As new attack methods emerge, the definition of reasonable security evolves.

Today, many security frameworks and regulatory bodies are emphasizing stronger identity protections, including:

Phishing-resistant authentication
Conditional access policies
Monitoring for suspicious login behavior
Controls for third-party application permissions

Organizations that rely solely on basic MFA may increasingly struggle to demonstrate that their authentication protections are sufficient.

The Shift Toward Phishing-Resistant Authentication

To address the weaknesses of traditional MFA, many organizations are adopting phishing-resistant authentication technologies, which can be enabled with tools like Duo and Okta. These solutions rely on cryptographic authentication tied to trusted devices, which prevents attackers from capturing or replaying login credentials.

Examples include:

Hardware security keys
Passkeys
Certificate-based authentication

Because authentication is tied to both the device and the legitimate website domain, these technologies significantly reduce the success rate of phishing attacks.

Why Conditional Access Is Becoming Essential

Conditional access adds another layer of protection by evaluating context and risk before granting access. Instead of treating every login the same, conditional access policies analyze signals such as:

Device security status
Geographic location
Network reputation
User behavior patterns

If something appears unusual, such as a login from a new country, the system can require stronger authentication or block the attempt altogether. This risk-based approach to authentication helps prevent many account compromise scenarios.

The Future of HIPAA Risk Assessments

As authentication threats evolve, healthcare security assessments are increasingly focusing on identity protection maturity. Organizations may begin seeing findings related to:

Weak or outdated MFA methods
Lack of conditional access policies
Insufficient monitoring of login activity
Unrestricted third-party application permissions

In particular, email systems without advanced authentication protections may be flagged as high-risk vulnerabilities, especially when PHI is accessible.

LuxSci’s Modern Approach to MFA

Modern threats require more than a simple second login factor. LuxSci approaches authentication security with layered identity protection designed specifically for healthcare environments.

Instead of relying solely on basic MFA methods like SMS codes or email verification, LuxSci supports stronger authentication controls and policies that align with evolving security expectations. These protections can include:

Strong multi-factor authentication options
Monitoring for unusual login behavior
Enhanced identity verification mechanisms

By combining multiple security layers within its HIPAA-compliant secure communications email and marketing solutions, LuxSci helps healthcare organizations protect sensitive email communications while maintaining usability for providers, health plan administrators, payment providers, and patient engagement teams.

Conclusion

Multi-factor authentication remains an important security control—but not all MFA is created equal. Attack techniques such as phishing proxies, token replay, and consent phishing have demonstrated that traditional MFA methods can be bypassed. As a result, regulators and auditors are increasingly expecting stronger identity protections.

For healthcare organizations that rely heavily on email communications, the implications are significant. Weak authentication controls can expose sensitive patient data and may soon appear as high-risk findings during HIPAA risk assessments. The organizations best positioned for the future will be those that modernize authentication strategies now, moving toward phishing-resistant methods, conditional access policies, and layered identity protection.

Reach out to LuxSci today to learn how HIPAA compliant email can support both your organization’s engagement and cybersecurity needs.

FAQs

1. What is traditional MFA?

Traditional MFA refers to authentication methods that require a second verification step, typically SMS codes, email codes, or push notifications.

2. Why can attackers bypass MFA today?

Modern phishing tools can intercept authentication sessions or steal login tokens, allowing attackers to access accounts even when MFA is enabled.

3. What is phishing-resistant authentication?

Phishing-resistant authentication uses cryptographic methods tied to trusted devices, preventing attackers from capturing login credentials.

4. Why is email security especially important for healthcare organizations?

Email systems often contain patient communications and sensitive information, making them a common target for cyberattacks.

5. How can organizations improve authentication security?

Organizations can strengthen identity security by adopting phishing-resistant authentication methods, implementing conditional access policies, and monitoring login activity.

Encryption Optional Email Will Fail Audits in 2026 and Beyond

February 24, 2026
Pete Wermter

For years, healthcare organizations have relied on click-to-encrypt email workflows and secure portals as a practical compromise between usability and compliance. Or in some cases, they simply thought most of their emails did not need to be compliant. In regulated industries where data security and privacy are paramount, this approach was still considered “good enough.”

That era is ending.

As we progress into 2026 and beyond, regulators, auditors, and cyber insurers are sending a clear and consistent message: encryption that depends on human choice is no longer acceptable. It’s already happening. Encryption optional email isn’t merely raising concerns, it’s failing audits outright.

An Email Threat Landscape That’s Changing Faster Than Email Habits

Historically, email encryption was treated as a best practice rather than a hard requirement. If an organization could demonstrate that encryption tools existed and that employees had access to them, auditors were often satisfied. The box was checked, everybody moved on.

Today, the questions auditors ask are fundamentally different. Instead of asking whether encryption is available, they are asking whether sensitive data can ever leave the organization unencrypted. If the answer is yes, even in rare cases, or even accidentally, that’s no longer viewed as an acceptable gap. It’s viewed as inadequate control.

Why 2026 Is a Tipping Point for Email Security

Several forces are converging here in 2026 that make optional encryption increasingly untenable. Regulatory scrutiny around PHI and PII exposure continues to intensify. Breach costs and litigation are rising, with email remaining one of the most common vectors for data exposure and breaches. AI is also changing the game for cybercriminals, and attacks will continue to increase and be more sophisticated. As a result, cyber insurers are tightening underwriting requirements and demanding stronger, more predictable controls.

At the same time, email user behavior is unpredictable and inconsistent, which is a non-starter for data security in today’s world.

Taken together, these trends and behaviors point to a single requirement: email security controls must be automated. They must be enforced by systems, not dependent on employee memory, judgment, or good intentions.

The Reality of “Encryption Optional” in Practice

On paper, optional encryption can sound reasonable. In practice, it creates gaps large enough to open you up to a breach.

Secure portals are a good example. They require recipients to click a link, authenticate, and access content in a controlled environment. While this protects data in transit, and is a better approach than no security at all, it also introduces friction. And people don’t like friction. Senders forget to use the portal. Recipients ask for “just a quick email instead.” Shortcuts are taken to save time. And every shortcut becomes a risk.

Click-to-encrypt systems suffer from a similar problem. They rely on users to correctly identify sensitive data and remember to take action. But people often misclassify information, forget to click the button, or assume someone else has already secured the message. From an auditor’s perspective, this isn’t a training failure. It’s a set-up and control failure.

Email Security Defaults Are the New Normal

The latest message from regulators, auditors, and insurers is clear. If encryption is optional, data vulnerabilities become inevitable.

What can you do?

Below is a quick email security checklist to help you get started. Cyber insurers may require or recommend the following safeguards during the underwriting process, such as:

Multi-factor authentication (MFA)
Endpoint protection
Encrypted backups
Incident response planning
Encryption protocols for sensitive data in transit and at rest, including PHI in emails

In 2026 and beyond, healthcare organizations and regulated industries will be judged not by what they allow, but by what they prevent. Automated, encrypted email is the new. normal.

Want to learn more about LuxSci HIPAA compliant email? Reach out today.

LuxSci and Oiva Health Combine to Form Transatlantic Healthcare Communications Group

February 12, 2026
Pete Wermter

Boston & Helsinki, February 12, 2026 – LuxSci, a provider of secure healthcare communications solutions in the United States, and Oiva Health, a Nordic provider of Digital Care solutions in social and healthcare services, today announced that the companies are joining forces. Backed by Main Capital Partners (“Main”), the combination brings together two complementary platforms and teams, forming a strong transatlantic software group focused on secure healthcare communications.

Founded in 1999, LuxSci is a U.S. provider of HIPAA‑compliant, secure email, marketing, and forms solutions. Its application and infrastructure software enable organizations to securely deliver personalized, sensitive data at scale to support a broad range of healthcare communications and workflows including care coordination, benefits and payments, marketing, wellness communications, after care and ongoing care. Certified by HITRUST for the highest levels of data security, LuxSci serves dozens of healthcare enterprises and hundreds of mid‑market organizations.

Founded in 2010, Oiva Health is a provider of digital care and communications solutions in the Nordics. Headquartered in Finland, with additional offices in Denmark, Norway, and Sweden, Oiva Health offers digital care and digital clinic solutions – including digital visits, secure messaging, online scheduling and appointments, and caregiver communications – serving the long-term care, especially elderly care, and occupational healthcare verticals. The company employs approximately 60 people and has recently expanded across the Nordic region, with a growing presence in Norway and Sweden.

The combination of LuxSci and Oiva Health creates a larger, cross Atlantic group with complementary solutions, serving the U.S. and European markets. Together, the companies offer healthcare providers, payers, and suppliers a comprehensive suite of tools to communicate securely and compliantly, spanning communications, workflows, and virtual care delivery.

Daan Visscher, Partner and Co-Head North America at Main, commented: “We are pleased to announce this cross Atlantic transaction, creating an internationally active secure communications player within the healthcare and home care space. The combined product suite enables healthcare organizations to drive much needed efficiency gains in healthcare provision addressing a global trend of rising costs, aging population, and increasing pressure on resources needed to provide high-quality care.”

Mark Leonard, CEO of LuxSci, said, “We are thrilled to join forces with Oiva Health and believe that together we can truly make a difference in healthcare coordination, access, and delivery. We see an exciting path forward with our customers benefiting from an end-to-end, secure and compliant approach to optimizing both healthcare communications and today’s frontline workers, which we need now more than ever.”

Juhana Ojala, CEO at Oiva Health, concluded, “We look forward to this new chapter together with LuxSci. We are very excited about the strong alignment between our solutions, which especially strongly positions us to expand our flagship Digital Care offering to the high-potential U.S. care market – from care coordination to care delivery to in-home and institutional care.”

Nothing contained in this Press Release is intended to project, predict, guarantee, or forecast the future performance of any investment. This Press Release is for information purposes only and is not investment advice or an offer to buy or sell any securities or to invest in any funds or other investment vehicles managed by Main Capital Partners or any other person.

[END OF MESSAGE]

About LuxSci

LuxSci is a U.S.-based provider of secure healthcare communications solutions for the healthcare industry. The company offers secure email, marketing, forms and hosting, delivering HIPAA‑compliant communication solutions that enable organizations to safely manage and transmit sensitive data. Founded in 1999, LuxSci serves more than 1,900 customers across healthcare verticals, including providers, payers, suppliers, and healthcare retail, home care providers, and healthcare systems, as well as organizations operating in other highly regulated industries. LuxSci is HITRUST‑certified with example clients being Athenahealth, 1800 Contacts, Lucerna Health, Eurofins, and Rotech Healthcare, among others.

About Oiva Health

Oiva Health is a Digital Care provider in the Nordics, offering a comprehensive Digital Platform for integrated health and care services to digitalize primary healthcare, social care, hospital healthcare and long-term care services. The company was founded in 2010 and currently employs approximately 60 people in Finland, Denmark, Norway, and Sweden serving domestic municipalities, customers and partners, such as City of Helsinki, Keski-Suomi Welfare Region, Länsi-Uusimaa Welfare Region in Finland, and Viborg municipality in Denmark with its Digital Care platform. Annually over 5 million customer contacts are handled digitally through Oiva Health’s Digital Care and Digital Clinic platforms.

About Main Capital Partners

Main Capital Partners is a software investor managing private equity funds active in the Benelux, DACH, the Nordics, France, and the United States with approximately EUR 7 billion in assets under management. Main has over 20 years of experience in strengthening software companies and works closely with the management teams across its portfolio as a strategic partner to achieve profitable growth and create larger outstanding software groups. Main has approximately 95 employees operating out of its offices in The Hague, Düsseldorf, Stockholm, Antwerp, Paris, and an affiliate office in Boston. Main maintains an active portfolio of over 50 software companies. The underlying portfolio employs approximately 15,000 employees. Through its Main Social Institute, Main supports students with grants and scholarships to study IT and Computer Science at Technical Universities and Universities of Applied Sciences.

The sender of this press release is Main Capital Partners.

For more information, please contact:

Main Capital Partners
Sophia Hengelbrok (PR & Communications Specialist)

sophia.hengelbrok@main.nl

+ 31 6 53 70 76 86

Healthcare Email Marketing Best Practice Guidelines

May 16, 2025
Erik Kangas

Healthcare email marketing best practices involve the strategies, compliance measures, and patient-centered approaches that healthcare organizations use to create effective email communications while maintaining regulatory compliance and patient trust. These practices include obtaining proper consent, creating valuable content, implementing security measures, and measuring performance in ways that support patient care objectives rather than purely commercial goals. Healthcare providers, payers, and suppliers must follow healthcare email marketing best practice to avoid HIPAA violations, respect patient preferences, and build meaningful relationships with their communities. Understanding healthcare email marketing best practice helps organizations develop communication strategies that engage patients, promote health outcomes, and support organizational missions while navigating complex regulatory requirements and maintaining professional standards.

Patient Consent And Privacy Protection Best Practice

Healthcare email marketing best practice requires obtaining explicit patient consent before sending promotional communications and maintaining detailed records of consent preferences and dates. Organizations should use clear, plain language consent forms that explain what types of emails patients will receive, how frequently communications will be sent, and how patients can modify their preferences or unsubscribe completely. Consent should be specific to different types of campaigns rather than blanket authorization for all marketing communications.

Double opt-in procedures verify email addresses and confirm patient intent to receive marketing communications, reducing the likelihood of complaints and improving engagement rates. This process involves sending a confirmation email that requires recipients to click a link or reply to confirm their subscription. Healthcare email marketing best practice includes documenting these confirmation steps to demonstrate patient intent during compliance reviews.

Preference management systems allow patients to customize their communication preferences without completely opting out of all healthcare communications. Patients should be able to select specific types of content, adjust email frequency, or choose alternative communication methods. These systems help maintain patient engagement while respecting individual preferences and reducing unsubscribe rates.

Privacy protection measures include using secure email platforms, encrypting patient information, and limiting access to email lists based on job responsibilities. Healthcare organizations should never share patient email addresses with third parties without explicit consent and should implement data retention policies that automatically remove inactive subscribers after appropriate time periods.

Content Development And Educational Focus Best Practice

Healthcare email marketing best practice prioritizes educational content and patient value over promotional messaging to build trust and establish organizations as reliable health information sources. Content should be evidence-based, medically accurate, and reviewed by qualified healthcare professionals before distribution. Educational newsletters, health tips, and preventive care reminders provide value to recipients while supporting patient health objectives.

Seasonal health content aligns with patient needs and natural health awareness cycles throughout the year. Flu vaccination campaigns in fall, heart health education during February, and skin cancer awareness in summer provide timely, relevant information that patients find useful. This approach improves engagement while supporting public health initiatives and preventive care goals.

Content accessibility ensures that email communications can be understood and used by patients with varying health literacy levels, language preferences, and technological capabilities. Healthcare email marketing best practice includes using plain language, providing content in multiple languages when appropriate, and ensuring emails display correctly on mobile devices and various email clients.

Patient story integration and testimonials can provide emotional connection and practical insights while maintaining patient privacy protections. These stories should focus on health outcomes, positive experiences, and educational value rather than promotional messaging. All patient stories require explicit written consent and should be reviewed for privacy compliance before publication.

Timing And Frequency Optimization Best Practice

Healthcare email marketing best practice involves analyzing patient engagement patterns to determine optimal sending times and frequencies for different types of communications. Appointment reminders may perform better when sent during business hours, while educational content might be more effective during evening hours when patients have time to read longer materials. Testing different send times helps optimize engagement rates.

Campaign frequency should balance patient engagement with respect for recipient preferences and inbox management. Healthcare email marketing best practice suggests starting with conservative frequencies and adjusting based on engagement metrics and patient feedback. Weekly educational newsletters may be appropriate for some audiences, while monthly communications work better for others.

Automated campaign scheduling allows healthcare organizations to maintain consistent communication without overwhelming staff resources or patient inboxes. Triggered campaigns based on appointment schedules, discharge events, or care milestones provide timely, relevant information while reducing manual workload. These automated systems should include safeguards to prevent excessive communications to individual patients.

Campaign coordination across departments prevents patients from receiving multiple conflicting or redundant messages from the same healthcare organization. Healthcare email marketing best practice includes establishing communication calendars and approval processes that ensure consistent messaging and appropriate timing across different service lines and departments.

Compliance Monitoring And Quality Assurance Best Practice

Regular compliance audits verify that healthcare email marketing practices align with HIPAA requirements, CAN-SPAM regulations, and organizational policies. These audits should examine consent documentation, content approval processes, security measures, and patient complaint handling procedures. Healthcare email marketing best practice includes documenting audit results and implementing corrective actions when issues are identified.

Staff training programs ensure that team members understand regulatory requirements, patient privacy obligations, and organizational policies for email marketing activities. Training should cover consent management, content development, security procedures, and incident reporting requirements. Regular training updates address changing regulations and emerging best practices in healthcare communication.

Quality assurance processes include content review, technical testing, and approval workflows that prevent errors and ensure professional communication standards. Healthcare email marketing best practice involves multiple review stages including medical accuracy verification, compliance checking, and technical testing across different devices and email clients before campaign deployment.

Incident response procedures address patient complaints, privacy concerns, and technical issues that may arise during email marketing campaigns. Organizations should have clear escalation processes, investigation procedures, and remediation steps that address problems quickly and demonstrate commitment to patient satisfaction and regulatory compliance.

Performance Analysis And Continuous Improvement Best Practice

Healthcare email marketing best practice includes measuring campaign performance using metrics that reflect patient engagement, health outcomes, and organizational objectives rather than purely commercial success indicators. Appointment booking rates, screening completion rates, and patient satisfaction scores provide more meaningful performance indicators than traditional marketing metrics alone.

Patient feedback collection through surveys, focus groups, and direct communication helps healthcare organizations understand recipient preferences and identify improvement opportunities. This feedback should guide content development, timing decisions, and communication strategy adjustments. Healthcare email marketing best practice involves regularly soliciting and acting on patient input.

Benchmarking against healthcare industry standards and similar organizations provides context for performance evaluation and identifies areas for improvement. Healthcare organizations should compare their engagement rates, unsubscribe rates, and patient satisfaction scores with relevant industry benchmarks while accounting for differences in patient populations and organizational characteristics.

Continuous optimization based on data analysis, patient feedback, and regulatory changes ensures that email marketing practices remain effective and compliant over time. Healthcare email marketing best practice includes regular strategy reviews, campaign performance analysis, and implementation of evidence-based improvements that enhance patient engagement while maintaining regulatory compliance and professional standards

What Are the Benefits of Email Communication in Healthcare?

September 19, 2025
Erik Kangas

The benefits of email communication in healthcare include improved patient outcomes, reduced administrative costs, enhanced care coordination, and increased patient satisfaction through convenient, secure digital messaging platforms. Healthcare organizations implementing secure email systems experience improvements in medication adherence, appointment attendance, and chronic disease management while reducing telephone call volumes and administrative workload for clinical staff. These digital communication tools enable healthcare providers to maintain continuous contact with patients between visits, provide timely responses to health concerns, and deliver personalized education and support that strengthens patient engagement in their care management.

Relationship Building

Secure email platforms enable healthcare providers to establish deeper, more meaningful relationships with their patients through consistent, documented communication that extends beyond brief office visits. Patients can express their health concerns thoughtfully in writing, providing healthcare teams with detailed symptom descriptions and treatment questions that might be forgotten or rushed during in-person appointments. The benefits of email communication in healthcare become evident when patients feel more comfortable discussing sensitive health topics through written messages rather than verbal conversations, leading to more open and honest dialogue between providers and patients.

Response time flexibility allows healthcare providers to consider patient questions carefully and provide comprehensive, thoughtful answers without the time pressures associated with telephone conversations or office visits. Providers can research complex medical questions, consult with colleagues, and provide evidence-based responses that include educational resources and detailed explanations. This measured approach to communication enables healthcare teams to deliver higher-quality information and guidance compared to quick verbal exchanges that may lack depth or clarity.

Documentation benefits create permanent records of all patient communications that can be referenced during future appointments, shared with consulting specialists, or reviewed by other healthcare team members involved in patient care. These written records eliminate miscommunication issues that can occur with telephone conversations and provide clear evidence of medical advice, treatment instructions, and patient responses to interventions. Healthcare providers can track communication patterns over time to identify patient concerns, monitor treatment adherence, and adjust care plans based on documented patient feedback and questions.

Continuity of care improves when healthcare providers can maintain consistent contact with patients regardless of schedule conflicts, geographic distance, or other barriers that might prevent in-person visits. Email communication enables providers to follow up on treatment responses, check on patient recovery progress, and provide support for chronic disease management without requiring patients to schedule separate appointments for routine check-ins.

Operational Efficiency from the Benefits of Email Communication in Healthcare

Administrative workflow optimization occurs when routine patient inquiries can be handled through secure email rather than time-consuming telephone calls that interrupt clinical activities and require immediate staff attention. Reception staff experience reduced call volumes when patients can submit prescription refill requests, appointment scheduling inquiries, and general health questions through email systems that allow for batched processing during designated times. The benefits of email communication in healthcare extend to scheduling efficiency, as patients can request appointments, receive confirmations, and make changes through automated systems that operate beyond standard business hours.

Cost savings accumulate through reduced staff time spent on telephone communications, decreased appointment scheduling overhead, and improved resource allocation for patient care activities. Healthcare organizations report time savings when routine patient communications shift from telephone calls to secure email systems. These time savings translate to increased availability for patient care activities, reduced overtime costs, and improved staff productivity across administrative and clinical functions.

Revenue optimization results from improved appointment attendance rates when patients receive email reminders and have convenient options for rescheduling conflicts before they become no-shows. Billing efficiency improves when patients can receive statements, ask billing questions, and submit payment information through secure email channels that reduce administrative processing time. Insurance verification and prior authorization communications become more streamlined when documentation can be shared electronically rather than through time-consuming telephone calls and fax transmissions.

Practice scalability benefits emerge as email communication systems can handle increasing patient volumes without proportional increases in administrative staff or telephone infrastructure. Healthcare organizations can serve larger patient populations more efficiently while maintaining high-quality communication standards through automated systems that provide consistent, documented interactions with all patients regardless of practice size or growth patterns.

Clinical Quality Improvements and Patient Safety Benefits

Care coordination enhancement enables healthcare teams to share important patient information quickly and securely between providers, specialists, and other healthcare professionals involved in patient treatment. Email communication facilitates rapid consultation between primary care providers and specialists, enabling timely treatment decisions without delays associated with telephone tag or appointment scheduling. The benefits of email communication in healthcare include improved care transitions when patients move between different providers or healthcare settings, as complete communication histories can be shared electronically to ensure continuity and prevent important information from being lost.

Medication adherence monitoring becomes more effective when patients can report side effects, ask questions about their prescriptions, and receive guidance about proper medication administration through secure email channels. Healthcare providers can identify medication compliance issues early through patient communications and provide immediate support or adjustments before problems escalate to require emergency interventions. Prescription management improves when patients can submit refill requests electronically and receive confirmations or medication changes through documented channels that create clear records of all prescription-related communications.

Patient safety enhancements result from improved communication accuracy when important medical information is documented in writing rather than communicated verbally where misunderstandings can occur. Email systems enable healthcare providers to include detailed instructions, medication dosages, and follow-up requirements that patients can reference repeatedly to ensure proper compliance with treatment plans. Laboratory results and diagnostic test findings can be communicated through secure email with accompanying explanations that help patients understand their results and next steps in their care.

Preventive care compliance increases when healthcare providers can send personalized reminders about screenings, vaccinations, and wellness visits through email systems that track patient responses and follow-up requirements. Population health management becomes more effective when healthcare organizations can communicate with entire patient groups about health promotion activities, disease prevention strategies, and community health initiatives through targeted email campaigns.

Patient Empowerment from the Benefits of Email Communication in Healthcare

Convenient communication access eliminates many barriers that prevent patients from seeking timely healthcare guidance, particularly for working adults who cannot easily make telephone calls during business hours or patients with mobility limitations that make office visits challenging. Email communication enables patients to ask health questions, report concerning symptoms, and seek medical advice when they need it most rather than waiting for appointment availability or business hours. The benefits of email communication in healthcare become particularly valuable for patients managing chronic conditions who need frequent communication with their healthcare teams but cannot visit offices regularly.

Health education delivery through email platforms enables healthcare providers to share personalized educational materials, treatment instructions, and wellness resources that patients can access repeatedly and share with family members or caregivers. Educational content can be customized based on individual patient needs, diagnoses, and health literacy levels to ensure understanding and retention. Interactive educational resources sent through email can include videos, articles, and self-assessment tools that engage patients actively in learning about their health conditions and treatment options.

Decision-making support improves when patients have time to review treatment options, research their conditions, and formulate questions through email communication rather than making quick decisions during brief office visits. Healthcare providers can share decision aids, risk assessments, and treatment comparisons through secure email that enable patients to make informed choices about their care. Family involvement becomes easier when patients can share healthcare communications with family members or caregivers who help with decision-making and treatment management.

Self-advocacy skills develop when patients learn to communicate effectively about their health concerns, ask appropriate questions, and take active roles in their healthcare management through regular email interactions with their providers. These communication skills transfer to in-person appointments where patients become more prepared, engaged, and effective advocates for their health needs.

Technology Integration and Future Healthcare Innovation

Electronic health record integration ensures that all email communications become part of comprehensive patient medical records that support clinical decision-making and care coordination across multiple providers and healthcare settings. Automated documentation capabilities eliminate manual data entry requirements while maintaining complete communication histories that meet regulatory requirements and support quality improvement initiatives. The benefits of email communication in healthcare expand when integration capabilities enable providers to access complete patient communication histories during appointments, emergency situations, or care transitions.

Artificial intelligence applications can analyze email communication patterns to identify patients at risk for non-adherence, deteriorating health conditions, or care gaps that require proactive intervention. Natural language processing technologies can help prioritize urgent patient messages, identify concerning symptoms that require immediate attention, and route communications to appropriate healthcare team members based on content analysis. Machine learning algorithms can identify communication preferences and optimize message timing and content to improve patient engagement and response rates.

Telemedicine integration creates seamless communication workflows where email consultations can transition to video appointments when interaction becomes necessary for assessment or treatment. Secure messaging platforms can schedule and coordinate virtual visits, share pre-appointment questionnaires, and provide post-visit follow-up communications that support comprehensive telehealth experiences. Remote monitoring data from wearable devices and home health equipment can be communicated through integrated email systems that alert healthcare providers to concerning changes requiring intervention.

Population health analytics utilize email communication data to identify trends, measure intervention effectiveness, and guide public health initiatives across large patient populations. Healthcare organizations can analyze communication volumes, response rates, and patient engagement patterns to optimize their outreach strategies and resource allocation for population health impact. Quality improvement programs can use email communication data to measure patient satisfaction, identify areas for service enhancement, and demonstrate the benefits of email communication in healthcare to stakeholders and accrediting organizations.

Implementation Success Factors and Best Practices

Staff training programs ensure that healthcare teams understand how to use secure email systems effectively while maintaining professional communication standards and regulatory compliance requirements. Training should cover appropriate email etiquette, privacy protection measures, and workflows for managing patient communications efficiently without compromising quality or safety. Healthcare organizations must establish clear policies about response time expectations, appropriate content for email communication, and escalation procedures for urgent patient concerns that require immediate attention rather than email responses.

Patient education initiatives help individuals understand how to use secure email systems effectively, what types of health concerns are appropriate for email communication, and what security measures protect their private health information during electronic transmission. Educational materials should cover email security practices, account protection measures, and instructions for accessing and navigating patient portal systems. Healthcare organizations implementing secure email should provide multiple training formats including written instructions, video tutorials, and in-person assistance to accommodate different learning preferences and technology comfort levels.

Security protocols must be rigorously maintained to protect patient privacy and comply with healthcare regulations governing electronic communication of protected health information. Multi-factor authentication, encryption standards, and access controls ensure that only authorized individuals can view patient communications while audit trails track all system usage for compliance monitoring. Security assessments, staff training updates, and technology upgrades maintain protection against evolving cybersecurity threats that could compromise patient information or system integrity.

Quality monitoring procedures track email communication effectiveness through patient satisfaction surveys, provider feedback, and outcome measurements that demonstrate the benefits of email communication in healthcare across different patient populations and clinical scenarios. Healthcare organizations should establish metrics for response times, patient engagement rates, and clinical outcomes associated with email communication programs to guide improvement efforts and demonstrate return on investment to organizational leadership and regulatory bodies.

LuxSci vs. Paubox: How to Choose the Right HIPAA-Compliant Email Provider

January 29, 2025
LuxSci

Choosing the right HIPAA-compliant email vendor is crucial for protecting patient data and ensuring compliance with healthcare regulations, including verifying HIPAA compliance and security features, evaluating ease of use and integration capabilities, assessing deliverability and performance, and understanding pricing and scalability. You should also evaluate a vendor’s customer support and company reputation.

The Health Insurance Portability and Accountability Act (HIPAA) details strict guidelines for securing sensitive patient data, including Protected Health Information (PHI). As a result, healthcare providers, payers, and suppliers must use a HIPAA-compliant email provider to abide by regulations designed to safeguard PHI.

With this in mind, this post evaluates two of today’s most popular HIPAA-compliant email providers on the market: LuxSci and Paubox. We’ll compare the two HIPAA-compliant offerings on several criteria, helping you to decide which email provider best fits the needs of your organization.

LuxSci vs. Paubox: Evaluation Criteria

We will evaluate LuxSci vs. Paubox on the following criteria:

Data security and Compliance: how well each email provider safeguards PHI as per HIPAA’s requirements
Performance and Scalability: the platform’s ability to conduct bulk email marketing campaigns, and scale them as a company’s engagement efforts grow.
Infrastructure: if it provides the necessary technical infrastructure, processes and controls to both protect sensitive patient data and support high-volume email marketing campaigns.
Marketing Capabilities: if the platform provides tools for optimizing and refining your communication strategies.
Ease of Use: how steep the learning curve is for each platform.
Other HIPAA-Compliant Products: if the email provider offers complementary features that will aid your patient engagement efforts.

Now that we’ve explained the parameters by which we’ll be comparing the HIPAA compliant email providers, let’s see how LuxSci and Paubox stack up against each other.

LuxSci vs. Paubox: How They Compare

Data Security and Compliance

Both LuxSci and Paubox perform admirably here, with both being fully HIPAA-compliant email providers, offering automated encryption that allows you to include PHI in email communications straight away. Both providers secure email data both in transit and at rest.

Additionally, both are HITRUST certified, which further demonstrates a strong commitment to data privacy and security.

When compared to Paubox, LuxSci has the edge here because it has more comprehensive encryption options. This includes highly flexible encryption: automatically setting the ideal level of security and encryption needs based on the email content, recipient and business process.

Performance and Scalability

While both email providers deliver proven solutions and enable healthcare companies to scale their email marketing campaigns accordingly, LuxSci is the better option for high-volume email marketing campaigns, including bulk sending of hundreds of thousands to millions of emails per month. This is due to the fact that LuxSci specializes in assisting large healthcare organizations with executing high volume email marketing campaigns, including companies like Athenahealth, 1800 Contacts, Eurofins, and Rotech medical equipment. Consequently, LuxSci offers enterprise-grade scalability and has developed robust solutions capable of the high throughput required for enterprise-level patient and customer engagement efforts.

Infrastructure

Additionally, when it comes to other aspects related to infrastructure, LuxSci demonstrates an advantage. Firstly, they offer a dedicated, single tenant infrastructure, as well as secure email hosting, while Paubox does not. Additionally, though Paubox can provide additional options, such as high availability and disaster recovery, their capabilities may not as comprehensive as LuxSci.

Marketing capabilities

Both email delivery platforms possess useful marketing tools, enabling more effective HIPAA-compliant email marketing. This includes automation for streamlining email marketing campaigns and, customization options, so your messages are both more compelling and align with your company’s branding.

LuxSci offers comprehensive reporting capabilities, including real-time monitoring, detailed performance metrics (e.g., deliverability, open and click-through rates, bounced emails, spam complaints, and recipient domain reporting), as well as granular segmentation options.

Ease of use

Paubox has the edge here, being the easier of the two HIPAA-compliant email providers to deploy and for staff to get to ramp up on. Suited for more complex and sophisticated environments, LuxSci offsets this with exemplary customer support honed from decades of facilitating organizations’ HIPAA-compliant email marketing campaigns – especially for this on a large scale.

Other HIPAA-compliant Products

Lastly, when it comes to complementary features, both LuxSci and Paubox offer secure texting functionality, allowing healthcare companies to cater to their patients and customers who prefer to communicate via SMS. And while both email providers feature secure forms for HIPAA-compliant data collection, LuxSci’s forms are capable of handling complex workflows, including multi-step data collection, and providing better customization options.

Additionally, both provide capabilities for secure file sharing. LuxSci’s secure file sharing encrypts files at rest and in transit, allowing for granular access controls and helping ensure that only those within your company who must handle PHI have the appropriate access permissions. This is yet another safeguard against the exposure of PHI, whether accidentally, through identity theft (e.g., session-hijacking by a cybercriminal), or even corporate espionage.

Get Your Copy of LuxSci’s Vendor Comparison Guide

While this post focuses on comparing LuxSci and Paubox, we have created a complete Vendor Comparison Guide, which compares 12 email providers and is packed full of essential information on HIPAA-compliant communication and how to choose the best healthcare email solution for your organization.

You can grab your copy here, and don’t hesitate to contact us to explore your options for HIPAA-compliant email further.

LuxSci Establishes New Headquarters Offices in Cambridge, Mass.

September 3, 2024
LuxSci

We’re thrilled to announce the opening of LuxSci’s new headquarters offices at Harvard Square in Cambridge, Massachusetts!

The move marks another milestone in our continuing journey to innovate and grow in secure healthcare communications. The new workspace aims to bring our people and teams together for in-person interactions and collaboration, and to better connect with our customers, partners and thought leaders. Located in the heart of one of the world’s most prestigious educational and technology hubs, our new office space reflects our roots and connections to the Massachusetts Institute of Technology (MIT), and our founder Erik Kangas, an MIT alumnus and advisor.

(more…)