Responsible handling of sensitive information is part of everyday benefits administration. Security controls and documented processes help keep that handling consistent, developed around applicable HIPAA requirements.
ICHRA workflows involve employer, employee, enrollment, coverage, and payment-related information that requires consistent protection.
Different parts of that process carry different risks, and the controls below apply at the points where each one arises.
Role-based permissions limit platform access according to each user’s assigned responsibilities.
Authentication and session controls protect user accounts and reduce the likelihood of unauthorized access.
Sensitive information is encrypted during transmission and while stored.
Administrative actions are logged with relevant user and timing information to support internal review and accountability.
Policies, procedures, and platform safeguards are developed around responsibilities for handling protected health information.
The platform operates on modern cloud infrastructure selected for security, reliability, and scalability.
Employers, brokers, employees, and platform administrators interact with different parts of the ICHRA process. Permissions are assigned according to each user’s role, keeping information and platform capabilities aligned with individual responsibilities while reducing unnecessary exposure.
Security is not defined by a single feature, policy, or document. It depends on how information is accessed, transmitted, stored, reviewed, and handled day to day.
No platform can eliminate every potential security or privacy risk. Lirvion addresses that reality through layered technical controls, documented procedures, regular review, and clearly defined roles across the organizations and users involved.
Lirvion provides the technology and operational framework for the responsible handling of sensitive benefits information.
Protecting that information also depends on employers, brokers, administrators, employees, and service partners following appropriate security practices and managing access responsibly.
As the platform evolves, its controls and supporting safeguards will continue to be reviewed and strengthened.
