Security

Built for the security review.

Patient information stays inside.

  1. HIPAA compliant, end to end

    Every part of the system that touches patient information is built and run to HIPAA requirements.

  2. A BAA with every client

    We sign a Business Associate Agreement with every client. It comes with every plan.

  3. US data centers

    Patient information is stored and processed in the United States.

  4. PHI stays inside

    Patient information is handled inside our secure infrastructure and written to your EMR. It goes nowhere else. It is never sold, shared or used to train models.

  5. Caller verified first

    The agent confirms the caller’s name and date of birth before it shares anything from the chart.

  6. No medical advice

    Our agents never give medical advice. Clinical questions go to your care team with a summary.

Who handles patient information

Every service that touches patient information is under a signed BAA, with data in the United States.

  • Phone carrierBAA signed · US data
  • VoiceBAA signed · US data
  • AI modelBAA signed · US data
  • HostingBAA signed · US data

HIPAA compliant · BAA with every client · SOC 2 Type II in progress

Book a demo

Bring your security questions.