Those that attested or even those concerned with the HIPAA security issues - did you get a formal statement from AC regarding the fact that they implement necessary safeguards to protect the confidentiality and integrity of the electronic health information. (I guess to satisfy the "business associate" requirement). I assume that it would only be necessary if you are using the AC back up (since that involves the transfer of info to them).
Donald Phillips MD Cedar Hill Tx