How long do we need to keep documentation, and can backups handle it?▼
Retention periods come from Medicare rules, the DMEPOS supplier standards at 42 CFR 424.57, state law and your payer contracts, and your compliance lead or counsel should set the official policy. Once that policy exists, we design storage and backups to meet it: immutable copies that ransomware can't alter, tiered storage for older records and periodic restore tests that pull real archived orders. The goal is that when an audit request arrives for an old claim, the documents are there and readable.
Our drivers use tablets for signatures. What's the risk?▼
Those tablets carry patient names, addresses, equipment details and signatures, and they spend their days in vehicles. Without encryption and a passcode, a stolen tablet can become a reportable breach. We enroll field devices in management with full-disk encryption, strong passcodes, remote lock and wipe, and app restrictions so drivers only see the delivery app. We also set up cellular data so tickets sync immediately instead of piling up offline on the device.
Most of our referrals still come by fax. Is that a problem?▼
Fax itself isn't the problem; how it's received usually is. Many suppliers route digital faxes into a shared email inbox, which makes intake as vulnerable as any phished mailbox. We move you to a secure cloud fax or e-referral platform with individual logins, MFA, queues by branch or product line, and logging. Staff can still work referrals quickly, but nobody outside can reach them by guessing an email password. Faxes to physicians for signatures go out the same controlled way.
Do you work with CPAP and oxygen equipment?▼
We secure the IT side of it: staff accounts on manufacturer data portals, the workstations used to review usage reports, and the network and Wi-Fi in your clinics where devices are set up. We don't modify firmware or settings inside the medical devices, which belongs to the manufacturer and your clinical staff. If a manufacturer issues a security advisory, we help you understand the IT impact and coordinate with them on any updates.
Do we need PCI DSS if patients pay copays by phone or online?▼
If you accept card payments, PCI DSS 4.0 applies to how cards are handled, and the scope depends on how payments flow. Taking card numbers over the phone and typing them into a workstation brings that workstation and network into scope. Using a hosted payment page or a phone payment service that keeps card data away from your systems shrinks scope considerably. We review your payment methods, recommend ways to reduce scope and help with the security controls that remain.
We have several branches. How do you support them?▼
Most of our work is remote, which suits multi-branch suppliers well: one team sees every branch's devices, network and alerts. When hands-on work is needed, like a failed switch at a warehouse or a new branch buildout, we handle it locally near our offices or send a vetted local technician who works under our engineer's direction. We serve DME suppliers in Texas and nationwide, and use the same network and device standard everywhere.
Do you provide Durable Medical Equipment Suppliers IT Services in Houston and nearby areas?▼
Yes. LayerLogix is based in the Greater Houston area and delivers durable medical equipment suppliers IT services to businesses across Houston and the surrounding communities, including The Woodlands, Spring, Katy, Sugar Land, Conroe, Cypress, and Pearland. For most Houston-area clients we can be on-site the same day when something needs hands-on attention, and our help desk is available during business hours, with after-hours emergency support. Call 713-571-2390 to check coverage for your specific address.
What does Durable Medical Equipment Suppliers IT Services cost for a Houston business?▼
Pricing depends on your size and what you need, so we do not publish a one-size-fits-all number — but Houston businesses generally pay a flat, predictable monthly fee rather than surprise hourly bills. We start with a free, no-obligation assessment of your current setup, then give you a clear quote in plain English with no hidden costs. That way you know exactly what you are getting and what it costs before you commit.