Trust
Security and compliance you can verify
Billing means handling sensitive patient and financial data. Here is exactly how we protect it.
Business Associate Agreements
We sign a BAA with every client before accessing any protected health information, and require BAAs from any subcontractor that handles it.
Least-privilege access
Team members only access the systems and records needed for their role. Access is reviewed regularly and removed promptly when roles change.
Multi-factor authentication
MFA is required on every system that stores or processes client data.
Encryption
Data is encrypted in transit and at rest. Reports are exchanged through secure, access-controlled file sharing, never regular email.
Managed devices & audit logging
Work happens on managed, encrypted devices, and access is logged.
Workforce training
Every team member completes HIPAA privacy and security training at hire and annually.
Risk analysis & incident response
We perform regular HIPAA security risk analyses and maintain a documented incident response and breach notification process.
Your money stays yours
Payer deposits go directly to your practice's bank account. We never take custody of your reimbursements.
Note: there is no official "HIPAA certification." Ask any billing vendor for their BAA, their most recent risk analysis summary and their security policies. We're happy to share ours during onboarding.
Find out where your practice is losing revenue
Send us a de-identified A/R and denial export. Within 48 hours you get a one-page report showing your biggest revenue leaks and how to fix them. Free, with no obligation.