Request a ConsultationRequest a Quote

Compliance & Security

Your patients' data, handled with care

We handle protected health information (PHI) inside your systems wherever possible, under a Business Associate Agreement, and only to the extent each task requires.

Please don't send patient information through this website.No patient names, dates of birth, member IDs, account numbers or claim details. If we need any of this to help you, we will arrange a secure channel.
  • HIPAA-aligned safeguardsApplied across our billing work
  • Strict data access controlsRemote session security protocols
  • Role-based accessMinimum necessary, by task
  • No patient data on this websiteForms collect practice details only
01

Business Associate Agreement

A Business Associate Agreement (BAA) sets out how PHI may be used and protected, and what happens to it if our engagement ends.

  • Standard BAA executed prior to system access
  • Defines permitted uses of PHI for billing and related services
  • Sets out breach notification responsibilities
02

Operational standards

Strict data access controls and remote session security protocols.

  • Access limited to the people assigned to your account
  • Team members are trained on privacy and security expectations
03

Working inside your systems

We work inside your EHR and practice management systems wherever possible, using accounts you create and control.

  • Individual user accounts that you can see and revoke
  • Role-based access limited to the minimum necessary for each task
  • Secured connections for remote sessions
04

This website

Our website is for practice owners and administrators. It never asks for, and never needs, patient information.

  • Forms collect practice details only
  • All pages are served over an encrypted (HTTPS) connection
  • Enquiries go directly to our team inbox and are not shared with third parties for marketing

FAQ

Security questions practices ask us

Are you HIPAA certified?

There is no official HIPAA certification. We apply HIPAA-aligned safeguards, execute a standard BAA prior to system access, and can walk you through our approach on request.

Will our patient data leave our systems?

We aim to work inside your EHR and practice management system. Where a task requires a file, such as an aging report, it is exchanged through a secure channel agreed in advance.

Who on your team can access our data?

Only the people assigned to your account, with access limited to what each person's role requires. You can see and revoke the accounts you create at any time.

What happens to our data if we stop working together?

Access is removed when our engagement ends, and any files we hold are handled as set out in the BAA.

Free revenue review

Find out what your practice is leaving unpaid

Send us a few details and we will show you where claims, denials and A/R are costing you money.

Request a QuoteRequest a Consultation