Patient information, handled with care.

Where we handle protected health information (PHI) on behalf of a practice, we do so as a business associate. Before any PHI is handled, we enter into a business associate agreement (BAA) with your practice that defines permitted uses, safeguards and incident obligations.

HIPAA compliance is demonstrated through documented programs and agreements, not through a certificate. Official HIPAA certification does not exist, and we do not describe our services that way.

• Business associate agreements with your practice and with subcontractors that touch PHI
• Individual access with least-privilege permissions; no shared credentials
• Audit trails of who accessed or changed what, and when
• Encryption of data in transit and at rest
• Workforce training and confidentiality commitments for everyone who works on your account
• An incident response and breach notification process agreed with your practice
• Testing with synthetic data only, never real patient data
• Return or deletion of your data when the relationship ends, as agreed in writing

Call recording and AI disclosure notices are configured with each practice according to the laws that apply to it, including Florida’s consent requirements for recording calls. Your practice approves the wording before it is used.

Clinical decisions remain with your licensed professionals, and your practice remains responsible for its own HIPAA obligations as a covered entity. We support those obligations for the workflows you contract; we do not replace your compliance program.

Please do not send patient information through this website or to our business email address.