HIPAA-Ready Static IP Inbound & Outbound Proxy
The Trusted Networking Layer for PHI & Regulated Data
Secure your healthcare applications with a hardened, Networking perimeter designed for HIPAA workloads.
QuotaGuard Shield provides the technical safeguards required to transmit Protected Health Information (PHI) while maintaining encrypted transmission and limited technical metadata for operational review.
Administrative & Technical Safeguards
QuotaGuard Shield is designed to support the transmission security requirements of the HIPAA through advanced encryption and architectural isolation.
HIPAA-regulated customers generally need appropriate safeguards for ePHI in transit. QuotaGuard Shield is designed to support encrypted transmission for approved Shield configurations.
.webp)
Infrastructure Hardening for Compliance
Our Shield architecture goes beyond simple IP rotation to provide a complete security perimeter for regulated serverless, containerized, and PaaS environments.
Secure Outbound Authentication
Unlike standard proxies that may transmit credentials in cleartext, Shield wraps your proxy authentication in a secure TLS tunnel.
This prevents sensitive credentials from being leaked or intercepted during the initial handshake, protecting your application's entry point to the network.
No Payload Logging
To minimize your compliance surface area, QuotaGuard never logs request bodies or payload data.
We only record the essential metadata (timestamp, source IP, and destination) required for debugging and to satisfy the Audit Control requirements of the HIPAA Security Rule.
High-Availability Data Integrity
Approved HIPAA-regulated configurations may include dedicated or redundant Shield infrastructure depending on the customer’s use case, risk profile, and configuration requirements.
FAQs
Technical answers for compliance officers regarding PHI transmission and legal agreements.
Yes, for approved QuotaGuard Shield configurations.
Before preparing a BAA, we ask customers to complete a short HIPAA / BAA intake form so we can document the intended Shield configuration and confirm whether it is appropriate for HIPAA-regulated use.
BAA coverage is not automatic and does not apply to all QuotaGuard products or configurations.
Dedicated infrastructure may be required or strongly recommended depending on the customer’s use case, risk profile, and configuration.
Yes. QuotaGuard charges a $999 annual HIPAA / BAA administration fee for approved Shield configurations that require BAA coverage.
This fee covers intake review, BAA record preparation and maintenance, annual configuration review, and related security/compliance administration.
Custom legal review, custom security review, non-standard terms, or dedicated infrastructure may require separate pricing.
Most standard proxies use SSL termination, where they unwrap your data at the edge, inspect it, and then re-encrypt it.
QuotaGuard Shield uses SSL Passthrough, meaning we route your packets based on SNI headers without ever opening them. Your data is never "visible" to our infrastructure.
No.
QuotaGuard Shield is not a PCI-DSS certified service provider.
The Shield SSL passthrough architecture keeps cardholder data encrypted in transit, helping customers maintain their PCI-DSS scope boundaries.
Customers handling cardholder data should consult their QSA about whether QuotaGuard fits within their compliance scope.
Under the HIPAA Privacy and Security Rules, any subcontractors we use that may have incidental contact with our infrastructure must also adhere to the same stringent data protection standards.
QuotaGuard has executed AWS's standard Business Associate Addendum for the AWS account used to operate Shield infrastructure.
QuotaGuard records connection metadata for traffic through the proxy: timestamps, source IP and port, destination host and port, byte counts, and connection status.
Because Shield operates as a conduit, these logs capture how connections are made, not the contents of your traffic, which QuotaGuard does not decrypt or store.
Administrative actions on QuotaGuard's infrastructure are recorded separately (actor, timestamp, source IP, action).
Connection logs are retained for 60 days and then automatically deleted; QuotaGuard does not maintain a long-term log archive.
Customers operating under HIPAA can reference these logs in support of their own audit controls.
In the event of a suspected security incident or data breach, QuotaGuard follows a documented Incident Response Plan.
When a BAA is in place, breach notification follows the timelines in the executed BAA.
Still have questions?
We don’t outsource Support to non-Engineers.
Reach out directly to the Engineers who built Shield to discuss your specific architecture, integration challenges, or compliance constraints here 👇
🚀 Ready to Get Started? Choose Your QuotaGuard Path
QuotaGuard STATIC
QuotaGuard SHIELD
Trusted by Engineering Teams Everywhere
Reliability Engineered for the Modern Cloud
For over a decade, QuotaGuard has provided reliable, high-performance static IP and proxy solutions for cloud environments like Heroku, Kubernetes, and AWS.
Get the fixed identity and security your application needs today.