Privacy and security

Confidential by design, clear by default.

Access is tied to the signed-in person, their role and the selected practice. A hidden button or shared link is never treated as permission.

HIPAA compliant. Every practice gets a business associate agreement (BAA) in its Data Processing Agreement.

Clear sharing boundaries

You can tell what stays private and what the client can see.

Practitioner notes and client resources live in distinct spaces, with clear labels before anything is shared.

Explore connected tools

Private stays private

Practitioner session notes stay separate from recordings, activity reflections and progress deliberately shared with a client.

Practice-scoped access

The same person’s records with different practices remain separate, with role and care-team checks on every record.

Consent with evidence

Consent documents are versioned, and signatures retain the document version and evidence connected to the action.

Safe recovery

Autosaved drafts preserve input on failure, report conflicts and never show a pending or failed save as complete.

Product scope

See where these boundaries apply.

Review the tools for client records, notes, files, payments, messaging and video.

Explore features