Annabelle Health is built with HIPAA safeguards, and each one is named below. We sign a Business Associate Agreement with your practice before go-live.
We do not put a compliance label on the product. Compliance is shared between a practice and its vendors, and no software makes a clinic compliant on its own.
Visit audio is transcribed on our own servers. The note draft is written by a model run under a signed BAA with our cloud provider. The clinician reviews and signs.
The same answer for every AI feature, including what each one can see, is on where the AI runs.
And we sign a Business Associate Agreement with your practice before go-live.
Who works in the app, which role each person has, and whether a second factor is required.
Texts and campaign emails leave through outside sending services; keep them free of clinical detail.
Your own policies, training and risk assessment stay with the practice; counsel advises on state rules.
We publish no uptime percentage and no recovery-time promise.
Encryption at rest covers notes, messages and photos; we do not claim it covers everything.
Every request is logged. A tamper-evident chain on the log is not yet live for clinics.
An audit log of every request, per-patient access records on chart and photo views, eight breach-alert rules that owners triage, a second factor a clinic can require, lockout after 5 failed sign-ins, a 60-minute staff screen lock, a 20-minute patient portal sign-out, TLS in transit, notes, messages and photos encrypted at rest, and daily encrypted backups with scheduled restore checks.
We sign a Business Associate Agreement with your practice before go-live.
Annabelle Health is built with HIPAA safeguards, named on this page. Compliance is shared between a practice and its vendors: the practice decides who has access, trains its team and keeps its own policies. No software makes a clinic compliant on its own.
Staff see what their role allows; clinical tabs are hidden from non-clinical roles. Every chart and photo view writes a per-patient access record.
We answer them on screen, and in writing for the ones your counsel needs.