Before we request protected health information (PHI), Harper verifies the patient’s identity using Stripe Identity. This verification gives health information departments confidence that the requester is the individual named on the HIPAA authorization form.
Patients begin in Harper’s secure portal. We authenticate their account with multi-factor verification before we collect any identity documents.
Patients submit a photo of a government-issued ID (driver’s license, state ID, or passport) and a live selfie through Stripe Identity’s encrypted workflow. Images never touch Harper’s servers.
Stripe Identity analyzes the document security features, matches the selfie to the ID photo, and flags potential tampering. Harper receives only the verification result, not the underlying biometrics.
Our compliance team reviews each verification result before PHI requests are submitted. Failed or questionable matches trigger manual outreach to the patient for remediation.
For questions about verification or to confirm a patient request, contact us at hipaa@inbox.harper.new.
Learn more about Harper’s mission and services on our What is Harper page.
