Behavioral health carries some of the strictest privacy protections in healthcare, and PayerLenz is built around those protections from the ground up.
PayerLenz executes a business associate agreement with every customer before any patient data is exchanged: it isn't an optional add-on, it's a required step before a subscription begins. PayerLenz runs on HIPAA-eligible infrastructure, and our hosting, database and payment infrastructure providers maintain SOC 2 Type II attestations. Data is encrypted in transit using TLS 1.2 or better and at rest using AES-256 through our infrastructure providers.
Claims data contributed to the benchmark pool is de-identified before it's used to build any benchmark figure, and the pool never surfaces patient-identifiable information to another customer. Every externally visible benchmark is built from at least eleven matched claims. The floor is applied on every external surface and takes no override, so low-volume combinations are filtered rather than published. Access is role-based within your account, with pooled seats managed by your administrators.
When you upload your historical claims to earn a discount, protected health information (PHI) is stripped before the financial data enters the aggregate pool. Your facility identity is never attached to a benchmark another customer sees, and minimum-volume floors keep your specific arrangements from being exposed through thin aggregates.