Security

Built to be safe on a clinical phone line.

This page is written for the person who actually runs the practice — not for a legal team. Here's what we protect, how, and what our AI will never do.

"Our AI never gives medical advice, never triages symptoms, never discusses results. It schedules, quotes, routes, and escalates urgent calls to your team instantly."

The clinical guardrail is not a setting you can accidentally turn off. It's how the system is built.

  • HIPAA configuration

    Call data lives in a HIPAA-configured environment with access logging, least-privilege permissions and vendor controls reviewed before anything touches your patients' information.

  • Business Associate Agreements

    On the Medical/HIPAA plan we sign a BAA before launch. You get a plain-language summary of what we handle, what we store, and for how long — not a 40-page PDF you have to decode.

  • Encryption

    Everything is encrypted in transit and at rest. Transcripts, recordings and summaries are protected the same way, and staff access is scoped to your practice only.

  • Call recording controls

    You decide whether calls are recorded, whether transcripts are kept, and how long we retain them. Turn recording off entirely and you still get written summaries.

  • Who can see what

    Role-based access means your front desk sees what it needs and your administrators see everything. Every export and every login is logged.

Want the BAA and controls reviewed before you commit?

We'll walk your practice manager and your compliance contact through it before you sign anything.

Start Free Month