Security & compliance

Patient data, protected by design.

Trust is the product. Ovia is engineered around patient privacy from the first line of architecture. Placeholder copy — have counsel review before publishing.

HIPAA-first architecture

Administrative, physical, and technical safeguards with signed BAAs for every practice. Placeholder — confirm with counsel.

Encryption everywhere

AES-256 at rest, TLS 1.2+ in transit. Call audio is processed securely and never stockpiled. Placeholder — confirm with counsel.

Business Associate Agreements

A signed BAA with every practice before any patient data flows. Placeholder — confirm with counsel.

Role-based access

Granular permissions per role, so each team member sees only what they need. Placeholder — confirm with counsel.

No training on your data

Patient data is never used to train shared models. Placeholder — confirm with counsel.

Audit trails

Access controls and audit logging come standard on every deployment. Placeholder — confirm with counsel.

How patient data flows.

Calls and messages are processed to complete the requested task — booking, reminders, intake — then retained only as long as your practice requires. Placeholder description — confirm retention policy before publishing.

Questions for our security team?

We'll walk through our safeguards and share documentation under NDA.

Contact us