Security & compliance

Security and compliance, handled for you

Protecting patient data is the baseline, not a feature. Here's how we handle it — in plain language.

HIPAA-compliant

Built to the HIPAA Security and Privacy Rules from day one, not retrofitted.

BAA with every practice

We sign a Business Associate Agreement before you ever see a patient in the system.

Encrypted in transit & at rest

All data is protected with TLS in transit and strong encryption at rest.

Role-based access control

Every user sees only what their role allows. Admins control who can do what.

Audit logging

Access and changes are recorded, so you always know who touched a record.

Backups & monitored uptime

Automated backups and hosted, monitored infrastructure keep you running.

Your data is always yours

Export your patients, notes and billing whenever you want, in portable formats. No lock-in, no hostage fees, no reason to fear switching — to us or away from us.