Compliance

Built for the rules of the region

Health exchanges, e-claims and e-invoicing for the UAE and Saudi Arabia, in-country data for the UAE, Saudi Arabia and Egypt, and HIPAA and GDPR compliance, built to SOC 2 controls. All in one record.

Region by region

Compare compliance across every region

The laws Helix complies with, the health exchanges, e-claims and e-invoicing it connects to, and where your data is stored.

Helix compliance by region: laws, health exchanges, e-claims, e-invoicing and where data is stored
RegionLaws and standardsHealth exchangesE-claimsE-invoicingWhere data is stored
United Arab EmiratesDHA (Dubai) · DOH (Abu Dhabi) · MOHAP (Northern Emirates)
  • UAE Federal Law No. 2 of 2019 (ICT in health fields)
  • UAE PDPL (Federal Decree-Law No. 45 of 2021)
  • DHA, DOH (ADHICS) and MOHAP requirements
  • NABIDH
  • Malaffi
  • Riayati
  • eClaimLink (DHPO)
  • Shafafiya
NoneUAE clinics' data is stored in the UAE.
Saudi ArabiaCHI · ZATCA
  • Saudi PDPL
  • NCA cybersecurity controls
  • CHI/NPHIES requirements
  • NPHIES (via Waseel)
  • NPHIES (via Waseel)
  • ZATCA Phase 2
Saudi clinics' data is stored in Saudi Arabia.
Egypt
  • Personal Data Protection Law (Law No. 151 of 2020)
NoneNoneNoneEgyptian clinics' data is stored in Egypt.
Global standards
  • HIPAA compliant
  • GDPR compliant
  • Built to SOC 2 controls
NoneNoneNoneNone

AI models run in Helix's own cloud. Customer data is never used for training. How we protect data: security and compliance.