Privacy & trust
Your health information is treated like it belongs in a doctor's office.
This platform is designed around HIPAA-oriented safeguards for telehealth care. It is not certified or attested as HIPAA compliant, and nothing here should be read as a compliance guarantee.
LegitScript certification
We are pursuing LegitScript Healthcare Certification, the independent review that verifies a telehealth provider's licensure, prescribing practices, privacy program and advertising standards.
Care-team access only
Physicians, nurse practitioners, and nurses can view clinical records only for patients they are actively serving. Patients see only their own record.
Administrative separation
Administrative and operational staff can manage memberships, scheduling, and configuration, but cannot read intake answers, encounter notes, secure messages, or patient documents.
Versioned consent
Telehealth consent and the privacy notice are versioned. Each acknowledgement is recorded with the document version it applied to, so there is a clear record of what was agreed upon.
Configurable clinician scope
Nurse practitioner permissions are managed separately from physician permissions. Controlled-substance prescribing is off by default, and permission changes are recorded.
Session protections
Sessions time out after a period of inactivity, sign-out clears cached clinical data, and consent must be acknowledged before the patient portal opens.
Demo-only data
This environment intentionally contains only seeded fictional records. No real medical data should be entered until vendor agreements and a compliance review are complete.
No representation is made that this platform, its hosting, or any connected vendor is HIPAA compliant. Compliance is an organizational program — it depends on executed BAAs, documented policies, workforce training, risk analysis and ongoing monitoring, and must be validated by qualified legal and compliance advisors before any real protected health information is processed.
Integration points for video, payments, e-prescribing, labs and identity verification are configurable so vendor selection and contracting can follow the compliance review.