Your nurses chart on Wi-Fi you will never control
A clinic keeps its staff inside one building on one network. A home health agency sends clinicians into patient houses, where they open a laptop on whatever router happens to be there. The patient's network is not yours to secure, but the ePHI crossing it is still your obligation. SACVPN encrypts that traffic before it reaches the local network, so the state of someone's home Wi-Fi stops being your exposure.
Where a VPN fits in your HIPAA obligations
A VPN is one control, not a compliance program. These are the specific safeguards encrypted remote access supports for an agency with staff in the field.
Transmission security
ePHI encrypted end to end across untrusted networks
Access control
Device-level authentication before the network is reachable
Integrity controls
Data protected against interception in transit
Workforce turnover
Immediate per-device revocation when staff leave
Built for the way field staff actually work
Protection on networks you do not control
Field staff connect through patient home Wi-Fi, cellular hotspots, and coffee shop networks. SACVPN encrypts the traffic before it touches any of them, so the quality of the local network stops being your exposure.
Built for laptops and tablets in the field
WireGuard reconnects fast when a device moves between cellular and Wi-Fi, so a nurse charting at the kitchen table does not lose the tunnel walking back to the car.
Encryption for ePHI in transit
ChaCha20 encryption protects electronic Protected Health Information as it moves between the field device and your systems, supporting HIPAA's transmission-security safeguard.
Instant revocation when staff turn over
Home health runs high turnover and per-visit contractors. Revoke a departing clinician's device access from one dashboard immediately, instead of hoping a laptop comes back.
Consistent egress IP for your EHR
Route field traffic through a stable IP your agency software can allowlist, so remote access does not mean opening your systems to the whole internet.
Per-device visibility across the roster
See which devices are provisioned and active across your field staff without collecting patient data of any kind.
What runs over the tunnel
Everything a clinician touches between the driveway and the next visit. If it moves patient information across a network your agency does not own, it belongs inside an encrypted tunnel.
That includes the systems people forget about: EVV check-ins, wound photos taken on a tablet, and schedule changes pushed mid-route.
- Point-of-care charting in the patient's home
- OASIS assessment documentation from the field
- Electronic Visit Verification (EVV) check-in and check-out
- Agency EHR access (WellSky, Axxess, MatrixCare, Alora, HCHB)
- Wound photos and clinical images uploaded from a tablet
- Telehealth and remote clinician supervision visits
- Scheduling and route changes pushed to field staff
- Back-office billing and claims from remote coordinators
Related reading
Pricing for agencies
Priced per agency, not per seat you have to count every month. No setup fee and no contract. Start on a few devices and expand once you have seen it work on real routes.
Compliance
For regulated teams whose staff work outside the office
- Up to 25 devices
- Encryption in transit supporting the HIPAA transmission-security safeguard
- Device-level access control with instant revocation
- Audit log export for compliance reviews
- US-based support
Compliance Plus
For larger field workforces
- Up to 50 devices
- Everything in Compliance
- Priority support
- Dedicated node option
Running more than 50 field devices, or need a dedicated node? Get in touch and we will size it with you.
Questions agencies ask
Why do home health agencies need a VPN more than a clinic does?
A clinic has staff inside one building on one network the practice controls. A home health agency has clinicians opening laptops in patient houses, on residential Wi-Fi, hotspots, and public networks that the agency has no authority over. The HIPAA obligation for ePHI in transit does not move to the homeowner just because the nurse is standing in their living room, so the agency needs to protect that traffic itself.
Is SACVPN HIPAA compliant?
No VPN by itself makes an organization HIPAA compliant, and any vendor claiming otherwise is overselling. SACVPN's WireGuard encryption supports the Security Rule's transmission-security safeguard for data in transit. Full compliance still depends on your access controls, audit logging, workforce training, and the other administrative and physical safeguards your agency runs.
Does SACVPN sign a Business Associate Agreement (BAA)?
Not yet, and we would rather say so plainly than promise paperwork we cannot back up today. A BAA is actively in progress: the agreement is drafted from the HHS model provisions, and we are completing the upstream agreements with our infrastructure providers first, because a BAA is only meaningful if the whole chain is covered. If a signed BAA is a requirement for your agency, tell us and we will let you know the moment it is available.
Will it work where our nurses actually go, including rural areas with bad signal?
WireGuard is a lightweight protocol that establishes and re-establishes connections quickly, which matters more than raw throughput on weak cellular. It adds minimal overhead compared to older protocols like OpenVPN. It cannot create signal where there is none, but it will not be the reason a weak connection fails.
What happens when a clinician leaves the agency?
You revoke that device from the dashboard and its access ends immediately. Given how much turnover and per-visit contract staffing home health runs, this tends to matter more day to day than the encryption itself.
Does SACVPN see or store our patient data?
No. SACVPN encrypts and routes traffic. We do not collect, inspect, or retain the clinical content moving through the tunnel, and we have no reason to.
Protect the traffic before it leaves the house
Set it up on a few devices first and watch how it behaves on real routes before you roll it out to the whole roster.