Enterprise-grade security and HIPAA compliance built for DSOs and group practices.
Real-time compliance status, 18 policies, 20 monitored controls, and our subprocessor list.
BAA available for every eligible customer. Designed to operate as a Business Associate under HIPAA with required safeguards in place.
Granular permissions ensure least-privilege access. Roles are reviewed regularly and revoked immediately on offboarding.
Immutable audit trail of all PHI access, modifications, and system actions. Available for compliance review on request.
AES-256 at rest and TLS 1.3 in transit — applied to call recordings, patient records, and all PMS data.
Read-only access where possible; write operations limited to scheduling and approved workflows.
OAuth 2.0, API key rotation, rate limiting, and IP whitelisting for all integrations.
Logical data separation ensuring your practice data is never co-mingled with others.
Everything your security team needs for vendor reviews and audits.
Sample BAA available for review. Signed before any PHI is processed.
Our team is ready to answer your questions and provide documentation for your compliance review.
