Trust

Private by design.

Patient information is protected health information. We treat it that way.

HIPAA-compliant infrastructure

Patient information is stored only in access-controlled cloud systems operated under business associate agreements.

Transcripts, not recordings

We keep the conversation transcript. We don’t keep audio.

Never on laptops

Patient information is never stored on our team’s computers.

Limited, reviewed access

Only authorized people can see patient information, using multi-factor sign-in. We review access regularly.

Encrypted

Data is encrypted in transit and at rest.

No selling, no ads

We don’t sell personal information or use it for advertising.

Security program. SOC 2 in progress.

Written policies, annual security and HIPAA training, regular access reviews, change management and incident response, all owned by our security lead.

Trust Center. The details, in one place.

See our security policies, controls and subprocessors, and request detailed documentation for your security review.