HIPAA & security
We protect patient data like it's our own. Because it is.
As a licensed facility operator, our founder is accountable to the same rules you are. Here's how we keep your practice protected.
Our commitments
Eight safeguards in every engagement
Signed BAAs
We sign a Business Associate Agreement with every client and only use vendors who will sign one with us.
Encryption
Patient communications are encrypted in transit and at rest on HIPAA-compliant infrastructure.
Access controls
Role-based permissions, unique logins, and audit trails. Staff see only what they need.
No PHI in marketing pixels
Ad and analytics tracking is kept away from forms and pages where health information could leak.
Review safety
Response guidance that protects privacy and never confirms a patient relationship publicly.
Before/after consent
Written, specific patient consent captured before any image is used in marketing.
Staff training guidance
Practical, plain-English guidance your front desk can follow every day.
Risk assessments
Structured reviews that surface gaps and document how they were addressed.
Questions
HIPAA FAQ
This page describes our practices and is not legal advice. Consult your compliance counsel for guidance specific to your practice.
Want a second set of eyes on your compliance?
Your free assessment includes a review of how patient data moves through your marketing and communications.