Skip to main content
SahandSoltanieh
Participating Frequently
January 20, 2022
Answered

Is Adobe Embed API HIPAA compliance?

  • January 20, 2022
  • 2 replies
  • 1657 views

Hi,

 

My question is whether Adobe Embed API is HIPAA compliance or not?

 

Thanks,

This topic has been closed for replies.
Correct answer Sid.Sidhu

Hello @SahandSoltanieh ! Adobe Embed API is not HIPAA compliant currently. Please also note, the Developers may not use Document Cloud Services SDK to collect, process, or store sensitive personal data such as protected health information under HIPAA, children’s personal information under COPPA, and other similar information as described in our General Terms

 

Thanks!

2 replies

Known Participant
January 25, 2022

What information is sent to Adobe by the embed API? My understanding was that the Adobe's embed viewer is a local application (similar to Adobe Reader) for viewing PDFs in a browser. Are there certain features of the embed API that transmit data? Additional details would be appreciated!

SahandSoltanieh
Participating Frequently
January 25, 2022

Given how the API works, I assume PDF files will be uploaded to Adobe cloud storages in order to be parsed, and then they would be served directly through their servers rather than yours. But I'm not quite sure, I would love to know more about this as well.

Known Participant
January 25, 2022

I found this in the FAQ (https://community.adobe.com/t5/document-services-apis-discussions/faq-for-document-services-pdf-embed-api/m-p/10726141#M3)

 

When Adobe Analytics is not enabled by the SuiteID and no other events are enabled, does Adobe collect any data about the PDF being viewed.

  • The PDF Embed API  stores user settings in client-side browser's local storage for things such as color for annotation. As far as analytics is concerned, PDF Embed ONLY gathers standard anonymous usage and data parameters like locations, timezone, pdf file lang, file name, file size, no of pages, etc.. It doesn't store any user-generated content in analytics and never shares user-generated content with Adobe servers.
Sid.SidhuCommunity ManagerCorrect answer
Community Manager
January 20, 2022

Hello @SahandSoltanieh ! Adobe Embed API is not HIPAA compliant currently. Please also note, the Developers may not use Document Cloud Services SDK to collect, process, or store sensitive personal data such as protected health information under HIPAA, children’s personal information under COPPA, and other similar information as described in our General Terms

 

Thanks!

SahandSoltanieh
Participating Frequently
January 20, 2022

Thanks for the quick response. Great API, hopefully it'll become HIPAA compliant as well one day.