Trust & Governance
How we keep AI work reviewable, consented and accountable.
Every workflow we build follows the same rules: people approve what matters, patient information is handled under the right agreements, and each step can be traced. This page describes how we work. It is not a certification. The controls below are the standard every engagement is designed and tested against; the exact setup is configured for each practice and confirmed with you before go-live.
People stay in charge.
AI output is a draft until a person approves it. Clinicians review and sign every note, coders accept or change every code suggestion, and every task has a named owner on your staff. The chat assistant answers only from information your practice has approved and hands clinical questions to staff.
Consent comes before capture.
For ambient documentation, we build consent into the visit: your approved disclosure is shown, the patient's acknowledgment is recorded as a time-stamped event, and recording unlocks only after that. When someone new joins the conversation, recording pauses until their consent is captured. Your practice approves the disclosure wording and consent policy with its own counsel; we do not give legal advice.
Patient information is handled under agreement.
Our website and inquiry email are for business questions only and are not designed to receive patient information. Before any patient information is used in an engagement, we agree the data flow, who can access what, how long information is kept, and the agreements required, including a Business Associate Agreement where HIPAA requires one.
AI providers are evaluated for each use.
We select specialist AI providers for each workflow and review their data handling, storage location, subprocessors and terms before patient information is involved. We do not name a provider publicly until we have agreed with them how we may.
Connections are limited to what your systems support.
We connect to your EHR or practice-management system only through a supported export, integration or authorized interface. Where none exists, we design an assisted handoff instead. Nothing is written into a patient record without the approval step your practice defines.
Every step leaves a record.
Approvals, consent events, exceptions and handoffs are logged so your team can see what happened and when. After launch we review how the workflow performs with you and agree how issues and incidents are reported and handled.
What we do not claim.
We do not claim HIPAA certification (there is no such government certification), guaranteed outcomes, autonomous coding or billing, or that any workflow satisfies every law in every state. Those depend on your organization, your systems and your counsel.
Questions about how this would work for your practice? Request a free 20-minute consultation.