We're always looking for ways to help you get the most out of GoTo Connect, and making sure you have exactly what you need to operate with confidence is a big part of that. While HIPAA compliance remains your organization’s responsibility, GoTo Connect provides technical and operational safeguards to support you in meeting your HIPAA obligations when the platform is configured and used appropriately.
That's why we built the GoTo Connect HIPAA Guide.
Why We Created This 💡
We want to make sure you always have a clear picture of what GoTo covers and what your organization owns, so there's no guesswork on your end. We created a dedicated guide that lays it all out for you. It's not legal advice, and it won't walk you through every regulation. What it will do is give you a clear, actionable map of the shared responsibility model, the features that support your compliance posture, and exactly what we recommend configuring in your account.
It's a Partnership 🤝
GoTo Connect is built to support HIPAA-regulated use cases, and we hold up our end by providing the controls, safeguards, and infrastructure your organization needs. That includes a Business Associate Agreement (BAA), where applicable, as part of GoTo's standard contractual commitments, as well as independent third-party audits and attestations to validate our safeguards.
Your organization’s job is to configure and use the platform in a way that fits your obligations. The guide makes that handoff crystal clear, walking you through exactly what GoTo is responsible for, what falls on your side, and the specific steps we recommend taking in your account so you can meet the controls with the correct settings with confidence.
What's Inside 📋
The guide walks you through the platform capabilities that directly support your compliance posture:
- Access Controls and Authentication so only the right people can access communications features and data.
- Encryption in Transit and at Rest to protect ePHI across networks and within the platform.
- Audit Logging for full visibility into administrative changes, access activity, and configuration updates.
- Integrity Safeguards for stored communications data including voicemail, recordings, and faxes.
And because knowing the features exist is only half the battle, the guide also includes feature recommendations, so your team knows exactly how to configure and use the platform in a HIPAA-aligned way.
We've Got You 💚
We want you to feel set up for success, not just on day one, but every step of the way. This guide is part of that commitment.
👉 GoTo Connect HIPAA Guide: Download the guide
Want to dig deeper into GoTo's certifications and independent audit reports? Visit the GoTo Trust Center for the full picture.
