HIPAA & security

Protected health information, handled with care.

As your business associate under HIPAA, we’re legally bound to protect your patients’ data. Here is exactly how we do it.

Before we start

We sign a Business Associate Agreement (BAA) with your practice before we access any system.

BAA with every client

A signed Business Associate Agreement defines exactly how we may use and protect PHI.

Encrypted access

We connect to your PMS only through encrypted remote sessions. No PHI on personal devices.

Multi-factor authentication

Every account that can touch patient data requires MFA.

Least privilege

Team members only see the practices they are assigned to.

Access logging

Sessions are logged so activity can be audited.

Training & NDAs

HIPAA training at hiring and every year; confidentiality agreements for everyone.

Incident response

A written breach-response plan with notification timelines required by HIPAA.

Remote team, one standard

The same controls apply to every specialist, wherever they work.

Annual review

Policies and risk assessment reviewed every year.

Security FAQ

Straight answers.

We sign a BAA with every practice, train every team member on HIPAA, and access your systems only through encrypted, multi-factor-protected connections. See our HIPAA & Security page for details.

We are a U.S.-registered company. Our billing specialists work remotely, mostly from Pakistan, and they work U.S. business hours, so they’re online while your office is open. Your account manager is your single point of contact.

We work inside your practice management software through secure remote access. Patient data is not downloaded to personal devices.

Free practice audit

Get a free practice audit

We’ll review your insurance aging, denial patterns and verification process, and show you exactly where money is stuck. 30 minutes, no obligation.

Book your audit See pricing