Legal
HIPAA Notice
Effective date: June 21, 2026 · Atumnus LLC
Scope of this notice
This notice applies to Atumnus LLC and its VerifiedEnroll platform, including the laboratory submission portal (lab.verified-enroll.com) and the clinician portal (app.verified-enroll.com). The public marketing site (www.verified-enroll.com) does not collect or transmit protected health information (PHI).
Protected health information
Genomic panel results, patient identifiers, and clinical data submitted through the laboratory and clinician portals constitute protected health information under HIPAA. This data is processed and stored under Business Associate Agreements (BAAs) with all applicable service providers. PHI is used solely for the purpose of trial matching and physician-directed enrollment activities for which it was submitted.
Your rights
Patients whose PHI may be processed through the VerifiedEnroll platform retain all rights afforded under the HIPAA Privacy Rule, including the right to access, correct, and request restrictions on the use of their information. These rights are exercised through the covered entity (your treating physician or their institution), not directly through Atumnus LLC.
Minimum necessary standard
VerifiedEnroll applies the HIPAA minimum necessary standard to all PHI handling. Laboratory users are permitted to access only the specimens and results associated with their credentialed institution. Physicians access only patient records for which they are the ordering provider of record.
Security safeguards
PHI transmitted through VerifiedEnroll portals is encrypted in transit using TLS 1.2 or higher and encrypted at rest. Access is restricted by credential-based authentication. Security incidents are disclosed to affected parties in accordance with the HIPAA Breach Notification Rule.
Business associates
Atumnus LLC operates as a Business Associate to covered entities that use the VerifiedEnroll platform. We maintain executed BAAs with all downstream service providers who may have access to PHI, including hosting and infrastructure providers.
Contact for HIPAA inquiries
Questions regarding HIPAA compliance, data handling practices, or to report a potential privacy concern, contact Atumnus LLC at contact@atumnus.com. This notice will be updated as the platform evolves and as applicable regulations change.