Built for healthcare from day one.
AIVA handles protected health information every day. Here is how we protect it.
HIPAA and BAAs
We sign a Business Associate Agreement with every practice, and only work with vendors that sign one with us.
Encryption
Data is encrypted in transit and at rest, on secure, HIPAA-compliant servers.
Access by role and office
People see only the practices and offices they are assigned to. Admins control who can change settings.
Two-step sign-in
Every account uses two-step sign-in, and idle sessions sign out on their own.
Full audit trail
Every call, fax, message, task and setting change is logged with who, what and when.
Minimum necessary
When AIVA looks up clinical evidence, it shares only what is needed, never names or contact details.
What AIVA never does.
A licensed clinician approves every note, prescription and claim.
- Never gives medical advice or diagnoses
- Always says it is a virtual assistant
- Sends emergencies to 911
- Never signs a note or sends a prescription or claim on its own
Questions from your security team?
We are happy to walk your IT and compliance team through how AIVA is built.