Developing Software

By the way did you know that Emory requires you to submit your software app through an approval process before releasing publicly or posting in an app store?

While we realize it can seem a daunting task to navigate the process of software development and approval, we're here to help. Below is information and resources we hope will assist you in this process. As always if you have questions please reach out to us and we would be happy to help (404-727-2211 or ott-web@emory.edu).

Did you know that Emory has a Mobile App Catalog? You can find out more in this news release. Or check out our recent blog on it.

Important contacts

Stephen Wheat, Chief Information Technology Architect at LITS
Phone: (404) 727-5268; Email: swheat@emory.edu

George Wang, Emory LITS Review
Email: george.wang@emory.edu

Raj Guddneppanavar, Licensing Assocaite at OTT
Phone: (404) 712-1185; Email: rguddne@emory.edu

Emory LITS Website: http://it.emory.edu/index.html

Software App Review

It is important to submit your software app to the Emory review process. There are two paths available for this review.

Which path is right for me?

  • Option 1: Emory Mobile App Review and Distribution Process for Public App Marketplaces. This is for apps that are distributed through app stores and available for anyone to purchase them.
  • Option 2: Emory Mobile App Review and Submission Process for Internal Emory Distribution. This is for apps that will be used exclusively within the Emory community or that are in still in testing or reviews.

Complete details of this process can be found here.

Overview of the Review Process

Option 1: For Public Distribution

Step 1: Disclose your software to OTT: please do this by submitting a disclosure form (found on our website here) and start the commercial evaluation process.

Step 2: Branding review: any product utilizing the Emory brand must go through a review by the Communications and Public Affairs office. Those guidelines can be found on their website here.

Step 3: Legal review: OTT will work with legal counsel to review any relevant intellectual property issues.

Step 4: Compliance and regulatory review: this includes review focused on HIPPA.

  • What does HIPAA stand for? Health Insurance Portability and Accountability Act of 1996 .
  • What does HIPAA do? HIPAA works to protect the privacy of people’s ePHI, which includes personal health and insurance information.
  • What does HIPAA mean for my app? If your app collects, sends, and/or stores ePHI, then HIPAA may be applicable. If so, Emory OTT can help ensure that your app meets all regulations.

Step 5: Technical and information security review: LITS will perform this review looking at items such as ePHI, credit card information, or other compliance related items.

  • What does ePHI stand for? Electronic Protected Health Information.
  • What is ePHI? ePHI is the personal health information protected by HIPAA. It includes info about a person’s health and their health insurance.

Step 6: App store posting review: LITS will assist you in submitting your software app to the public marketplace.

Complete details of this process can be found here.

Option 2: For Emory Only Distribution

Step 1: Internal posting review: LITS will perform a high level technical review.

Step 2: Compliance and regulatory review: this includes review focused on HIPPA.

  • What does HIPAA stand for? Health Insurance Portability and Accountability Act of 1996.
  • What does HIPAA do? HIPAA works to protect the privacy of people’s ePHI, which includes personal health and insurance information.
  • What does HIPAA mean for my app? If your app collects, sends, and/or stores ePHI, then HIPAA may be applicable. If so, Emory OTT can help ensure that your app meets all regulations.

Step 3: Technical and information security review: LITS will perform this review looking at items such as ePHI, credit card information, or other compliance related items.

  • What does ePHI stand for? Electronic Protected Health Information.
  • What is ePHI? ePHI is the personal health information protected by HIPAA. It includes info about a person’s health and their health insurance.

Step 4: Complete internal distribution forms: LITS will assist you in submitting the appropriate forms.

Complete details of this process can be found here.

Health Data Storage Companies

These companies help you comply to HIPAA standards by handling ePHI data collection for a fee.

Programming Resources

Hiring Programmers

Federal Trade Commission

If you are developing a mobile health app find out which laws you need to follow in this section of their website.