Security & Compliance

Your data is safe with us.

Billing data is practice data and patient data. Here is exactly how we protect it — written in plain language, because trust shouldn’t require a law degree.

HIPAA & PHI handling

Revenue cycle work makes us a business associate under HIPAA. We sign a Business Associate Agreement with every practice before any data changes hands, and we handle protected health information under HIPAA's administrative, physical, and technical safeguards.

Access controls

Access to practice data is role-based and need-to-know. Team members see only the accounts they work, and access is reviewed and revoked when engagements or roles change.

Encryption & data handling

Practice data is encrypted in transit and at rest. We don't sell data, we don't share it with third parties beyond what an engagement requires, and we return or destroy it per the BAA when an engagement ends.

Questions about how we handle data, including a copy of our standard BAA, go to Contact us.