Does HIPAA apply to our agency?▼
It depends on what you do. If your agency bills health plans for services or provides health care, you are likely a HIPAA covered entity for those programs. Many human service programs aren't covered by HIPAA at all but still carry confidentiality duties under grant terms, VAWA, 42 CFR Part 2 for substance use treatment, or state law. We help you map which programs carry which obligations and build controls that satisfy the strictest one. The legal determination itself belongs with your counsel.
How do you protect domestic violence survivor data?▼
We treat it as its own zone. Survivor records sit in a restricted program inside your case system, visible only to the staff who serve those clients. Shelter addresses stay out of general calendars and shared documents. Front desk staff follow a caller verification script and never confirm whether someone is a client. If you receive VAWA funding, its confidentiality provisions limit sharing personally identifying information, including in HMIS, and we help configure your systems so those limits are followed in practice.
Our caseworkers use their own phones. Is that a problem?▼
It can work if it's managed. We use app-level protection so case management and Microsoft 365 apps live in a protected work container on the phone. That lets us require a PIN, block copying case data into personal apps and wipe only the agency data if the phone is lost or the employee leaves. Staff keep their personal photos and apps private. What we steer you away from is client photos stored in the personal camera roll, which is one of the most common leaks.
Can you help with our HMIS security requirements?▼
Yes. HMIS lead agencies typically set security expectations for participating organizations, often drawn from HUD's HMIS standards: unique user IDs, strong passwords, screen locks, protected workstations and limits on where data is stored. We secure the computers and accounts your staff use to reach HMIS, keep downloaded reports off shared drives, and document what's in place for your lead agency's review. Changes inside the HMIS itself are handled by the lead agency or its vendor.
What happens if a laptop or phone with client data is lost?▼
Your staff report it to us, and we lock or wipe the device remotely and revoke its sessions to case management and email. Because devices are encrypted, a lost laptop is far less likely to expose readable data. We then document what was on the device, when it was secured and which accounts were touched. That record goes to your leadership and counsel, who decide whether any notification to clients, funders or regulators is required.
We run on tight grant budgets. Where should we start?▼
Start with the controls that prevent the most harm per hour of work: MFA on email and case management, device encryption with remote wipe, blocking email forwarding to personal accounts and separate backups of case files. Those four cover the most common agency incidents. From there we add program-level access walls and staff training. We help you phase the work across budget cycles and can provide documentation you can use when a grant allows technology or security costs.
Do you provide Social Service Agencies IT Services in Houston and nearby areas?▼
Yes. LayerLogix is based in the Greater Houston area and delivers social service agencies IT services to businesses across Houston and the surrounding communities, including The Woodlands, Spring, Katy, Sugar Land, Conroe, Cypress, and Pearland. For most Houston-area clients we can be on-site the same day when something needs hands-on attention, and our help desk is available during business hours, with after-hours emergency support. Call 713-571-2390 to check coverage for your specific address.
What does Social Service Agencies IT Services cost for a Houston business?▼
Pricing depends on your size and what you need, so we do not publish a one-size-fits-all number — but Houston businesses generally pay a flat, predictable monthly fee rather than surprise hourly bills. We start with a free, no-obligation assessment of your current setup, then give you a clear quote in plain English with no hidden costs. That way you know exactly what you are getting and what it costs before you commit.