Legal & Compliance

NOT a HIPAA-Covered Entity

Nexus is NOT a HIPAA-covered entity and does not comply with HIPAA regulations. Nexus cannot enter into Business Associate Agreements (BAAs) with healthcare providers or organizations.

HIPAA compliance is required only when handling Protected Health Information (PHI). Since Nexus is not HIPAA-covered, users should not expect the protections that HIPAA provides.

Prohibited: Real Patient Data

Do not enter, store, or transmit any of the following in Nexus:

• Real patient names or identifiers
• Patient Medical Record Numbers (MRNs)
• Social Security numbers or health insurance information
• Diagnosis codes, lab results, or clinical notes tied to actual patients
• Any information that could identify a real patient
• Images, genetic data, or biometric information of real individuals

Using Real Patient Data is Your Risk

If you choose to use Nexus with real or identifiable patient information despite these warnings, you do so at your own legal and professional risk. Healthcare professionals are responsible for:

• Ensuring compliance with HIPAA, state privacy laws, and professional regulations
• Obtaining appropriate consent from patients
• Using only HIPAA-certified systems for patient data
• Any breach or violation of data protection regulations

For Real Patient Care: Use Certified Systems

For clinical decision-making involving real patients, always use HIPAA-certified Electronic Health Records (EHRs), clinical decision support systems, and platforms that have signed Business Associate Agreements with your organization.