Security & Compliance

Your clients' data, handled the way the rules require.

Built HIPAA-aligned from the ground up, hosted on AWS in the United States, with a Business Associate Agreement available for every client.

HIPAA-aligned
BAA available
AWS US-hosted
SOC 2 in progress
Encrypted end to end
🔒

Encryption everywhere

Every record encrypted at rest with managed keys and in transit over TLS. No data leaves the US region it's stored in.

👁

Least-privilege access

Access is scoped, logged, and reviewed. Full audit trail of every action on a claim — who, what, when.

📝

You approve everything

Stage-don't-submit means nothing reaches a payer without your review. Every correction is reversible and logged.

🏛

BAA for every client

A signed Business Associate Agreement is standard, not an upsell. Your compliance obligations are ours too.

📊

Complete audit trail

Every corrected dollar carries its rule, its source, its before-and-after, and who approved it.

AWS US infrastructure

Hosted entirely on AWS in US regions, with the monitoring and controls enterprise AWS provides.

The rule that governs the numbers

Every dollar, traceable to its source.

You can act on a number that's traceable. You can't act on one that's plausible.

If a rate isn't verified against its published source, we don't show you a number. We show you the reason — and where the number would have been.

SOC 2 audit in progress. “SOC 2 in progress” reflects our current status — we'll update this page when the report is issued.

Have a compliance question?

We're happy to walk your team through our security posture and BAA before you send a single file.

Get your free audit →