Security & Trust
Your patients' data,
handled like it matters.
You don't need to be technical to trust where your calls and patient details go. Here's the plain-English version — and if your security team wants the full detail, it's one request away.
Every clinic is walled off
Your practice's data is completely isolated from every other clinic on the platform. No shared views, no cross-clinic leakage — your patients' information stays yours.
Verified, tamper-proof updates
Every update that flows between Elaygent and your systems is cryptographically verified, so nothing can be altered in transit between your practice and your dashboard.
Qualified Enterprise BAA support
Calls, notes, and patient details are encrypted in transit and at rest. BAA support can be evaluated for qualified Enterprise implementations, with scope set by the executed agreement and complete processing chain.
Honest about what we are — and aren't
We're not SOC 2 or HIPAA certified, and we say so up front. You get a straight answer on what's implemented today and what isn't, so there are no surprises during your review.
Enterprise implementation options
Compliance choices, scoped to your data flow.
HIPAA-ready deployment and advanced data-retention options are available for qualified Enterprise implementations. These are configurable choices, not default settings on every plan.
HIPAA-ready deployment
Sensitive-call handling and operational-only summaries can be configured for a qualified Enterprise implementation.
Requires an executed BAA where applicable and a fully compliant end-to-end provider and data-processing chain for the selected implementation. It is not a certification.
BAA-supported implementation
BAA support can be evaluated for the requested Enterprise implementation and its processing chain.
The executed agreement and the data-processing chain define what is in scope; BAA support is not a default setting on every plan.
Recording-consent workflows
Consent prompts and recording behavior can be configured for the call flow as an Enterprise option.
This option must be tested against the clinic's jurisdictions, notices, transfers, and recording policy before go-live.
Zero Data Retention option
A scoped Zero Data Retention posture can be evaluated for qualified Enterprise implementations.
This is not end-to-end zero retention. It applies only to the Elaygent-managed artifacts named in the implementation; PMS, webhook destinations, analytics, storage, and other processors may retain their own recordings, transcripts, messages, structured outputs, or PHI.
Configurable retention
Choose a retention model aligned with your clinic's operational and compliance requirements.
Transcript, recording, and raw-payload windows are configured per workspace; deletion is separately enabled and audited.
Private or customer-controlled storage
Private or customer-controlled storage can be evaluated where the selected integration supports it.
Storage ownership, access, and retention scope are documented per integration; it is not assumed across every system.
Role-based access and audit visibility
Practice roles, tenant isolation, permission-gated artifacts, and audit views support Enterprise review.
The current role model and audit surfaces are documented in the security pack; custom roles are not implied.
HIPAA-ready deployment and Zero Data Retention are alternative modes. They are not simultaneously active for the same organization.
Need the full technical detail?
Detailed implementation, control evidence, vendor diligence, and integration materials are shared under NDA. We keep them out of public view so they support a qualified security review without exposing proprietary product design.
Already in a procurement process? Request the pack and our team will provide the appropriate materials for your review under NDA.
Elaygent is a software tool and is not a medical device. We are not SOC 2 or HIPAA certified. Qualified Enterprise implementations can be evaluated for BAA support and scoped compliance configurations; the signed agreement and full data-processing chain define what is in scope.
Ready to see it on your own numbers?
A product walkthrough, shaped around your practice requirements.
Book a demo