Expertise

Health & Wellness

An apple a day keeps the doctor away. A great website makes the user stay. We know how to guide you through the highly regulated field of health and wellness, creating websites with a clean bill of health.

Start your project

PII & Data Privacy

Anything that could be used to personally identify someone qualifies as PII, or personally identifiable information. The definition of PII varies around the world, but the U.S. National Institute of Standards and Technology (NIST) recognizes data such as a full name, birthdate, home address, or credit card number as PII. ATTCK’s underlying principle: Data access must be limited. When supporting specific compliance requirements, we consult with a variety of legal professionals to ensure that all official specifications and precedents are followed.

GDPR

When it passed in 2016, the E.U.’s General Data Protection Regulation (GDPR) represented a seismic shift in data privacy requirements. For global companies that store user data, the implications have been major. Implemented in May 2018, the GDPR dictates what user data can be stored and how, and we’ve adapted how we design and build interfaces for systems that enable access to that data.

HIPAA

HIPAA, the Health Insurance Portability and Accountability Act, sets a standard for how healthcare professionals store, access, and transmit medical and personal data between covered entities (CE) and business associates (BA). Compliance requires enforcing certain technical and physical safeguard policies, as regulated by the U.S. Department of Health and Human Services.

A national standard of accessibility guidelines, called Section 508 of the Rehabilitation Act of 1973, has been established to enable support for handicapped users of federal websites and websites that receive federal funding.

The Web Content Ac1cessibility Guidelines (WCAG) represent most of the core tenets of Section 508. Websites are graded as A, AA, or AAA based on how many of the 61 test criteria for the 12 guidelines are met.