Your patients' charts are the most sensitive thing you trust us with. Every system that touches PHI is encrypted, audited, and covered by a signed BAA.
Six safeguards behind every report, from the first upload to the approved document.
The database and every uploaded file are encrypted at rest with keys we manage in AWS KMS. TLS on every connection.
Each practice's records are walled off by checks in the app and, underneath, by row-level security in the database.
Clinical changes, visit-count corrections, record access and approvals go into an append-only log with who and when.
The database sits in an isolated network with no internet access. File links expire after five minutes.
An approved document can't be changed or silently overwritten, and it records exactly who approved it.
Drafts are generated with Amazon Bedrock under our AWS BAA. PHI is never used to train or improve any AI model.
Everything a practice checks before signing up, versioned and in plain language.
PHI lives on AWS, under a signed BAA. Stripe handles billing and never sees PHI.
Hosting, storage, sign-in, text extraction (Textract) and AI inference (Bedrock). The only vendor that touches PHI.
Subscription billing. Sees account and billing details only.
30 days' written notice before any new subprocessor touches PHI.
Ask about a vendorA practice owner accepts it once during onboarding, and it covers every clinician in the practice. No patient can be added until it's signed.
No. You keep documenting in your own EHR. Speekr works from the reports, evaluations and notes you upload.
No. PHI is never used to train or improve any model, and Amazon Bedrock doesn't train on what it processes for us.
In the United States, on AWS (us-east-2), in our encrypted database and file storage only. Never in logs or emails.
An owner or admin removes them, their access ends immediately, and the practice's records stay with the practice.
You can export your records first. After that, Speekr returns or destroys PHI as the BAA sets out.
Not yet. SOC 2 is on our roadmap.