HIPAA compliance
What we do, in specific terms.
90 days freeNo credit cardMigration included
- Business Associate Agreement signed with every practice before go-live.
- Encryption in transit (TLS 1.2+) and at rest (AES-256).
- Access control with role-based permissions and enforced MFA.
- Audit logging on every record access, exportable on request.
- Breach notification within 60 days, with a named security contact.
- Subprocessors listed publicly and reviewed annually.