3 min read
Why Paubox Marketing is the best HIPAA email marketing solution available
Chloe Bowen March 10, 2020
Although there are a number of email marketing tools on the market, most of them are not viable options for covered entities which must abide by HIPAA regulations. In this article we will explain why Paubox Marketing is the best HIPAA compliant email marketing solution available for healthcare providers.
Comparing the competition
None of the standard marketing tools suits the needs of a healthcare provider for a variety of reasons. You can compare and contrast the vendor options in this comparison matrix:
Company | Will they sign a BAA? | Can you send PHI? |
Adobe Campaign | NO | NO |
Blue Orchid Marketing | NO | NO |
Campaign Monitor | NO | NO |
Campaigner | NO | NO |
Drip | NO | NO |
Emma | NO | NO |
GetResponse | NO | NO |
Hubspot | NO | NO |
L-Soft | NO | NO |
Mad Mimi (GoDaddy) | NO | NO |
Mailchimp | NO | NO |
MailerLite | NO | NO |
Marketo (Adobe) | NO | NO |
Salesforce Pardot | NO | NO |
SendGrid (Twilio) | NO | NO |
Yesware | NO | NO |
ActiveCampaign | YES | NO |
Constant Contact | YES | NO |
Infusionsoft by Keap | YES | NO |
Salesforce Marketing Cloud | YES | NO |
Eloqua (Oracle) | YES | YES ** |
Paubox Marketing | YES | YES |
As you can see, most of the marketing vendors will not even sign a business associate agreement (BAA) with a covered entity, which is required for HIPAA compliance. Therefore they are immediately disqualified for use in healthcare. Although a few companies will sign a BAA, if you read the fine print, you will find that they are not safe options for covered entities either.
For example, while Constant Contact will sign a BAA, users are not allowed to transmit protected health information (PHI) via the platform. This is a problem since even something as banal as an email address or name becomes PHI when it is in any way associated with a healthcare provider—such as in a marketing email coming from your practice. Covered entities are required to take reasonable steps to protect PHI sent via email all the way to the recipient’s inbox. As such, HIPAA compliant email must be encrypted in-motion while being transmitted over the Internet and at-rest on a business associate's platform. However, in the case of Infusionsoft and Salesforce Marketing Cloud, the scope of their BAAs protect and encrypt data only at-rest in their platforms.
In other words, any email sent from Infusionsoft's or Salesforce Marketing Cloud's platform is not covered by a BAA. Oracle Eloqua is the only competitor that will sign a BAA and allow you to send PHI—however, the experience for your email recipients is terrible. To use Oracle Eloqua in a HIPAA compliant manner, recipients receive two emails for every message you send. Patients must also log into a secure message center to view your message— it does not appear in their inboxes. This creates friction and makes it less likely that your patients will read your marketing email.
Benefits of personalized HIPAA compliant email marketing
Paubox focuses on solving HIPAA compliance problems for secure communication. As such, we built Paubox Marketing with the goal to help healthcare providers benefit from the powerful tool of personalized email marketing. Email marketing has an average return on investment (ROI) of about $42 for every dollar spent.
Personalized messages perform up to three times better than generic blast emails. By tailoring your messaging to a specific patient, you can obtain 5 to 8 times more ROI for your marketing spend. In the healthcare field, personalizing your marketing emails for secure patient outreach can grow your business, reduce costs, and improve patient outcomes. For example, you could recommend additional tests or procedures based on a person’s risk factors to increase revenue, or you could send automatic pre-operation reminders (such as fasting before surgery) to decrease cancellations. You could also write an email newsletter announcing updates to your practice, offering referral discounts, or sharing helpful blog posts you've written. Arguably all of these use cases would also save lives as they would help people receive the right treatment when they need it. Really, the sky's the limit on uses for personalized email marketing in healthcare—but until now organizations subject to HIPAA have barely been able to use it.
Why you should choose Paubox Marketing
Paubox Marketing lets recipients view marketing emails like regular emails without relying on out-dated portal notifications which are terrible for the recipient. It allows you to segment and send secure email including PHI to increase patient engagement and build your business while remaining HIPAA compliant. Paubox Marketing is the only HIPAA compliant email marketing solution that will:- Sign a BAA
- Provide military-grade encryption
- Allow you to include PHI in your marketing emails
- Allow patients to read your emails directly from their inbox with no extra steps
In addition, Paubox Marketing is HITRUST CSF certified. Although you might see HIPAA as a roadblock to implementing an email marketing strategy, it doesn’t have to be.
Subscribe to Paubox Weekly
Every Friday we'll bring you the most important news from Paubox. Our aim is to make you smarter, faster.