Encryption in transit & at rest
TLS for data in motion and strong encryption for data at rest, across every service.
Security & Compliance
Trust is the first feature.
Prescr handles some of the most sensitive data there is. Here's exactly how we protect it, and an honest account of what's certified versus in progress.
Role-based access control
Least-privilege access so each staff member sees only what their role needs.
Full audit logging
Every access and change to patient data is recorded and reviewable.
Data-residency controls
Choose deployment regions that match your legal and procurement needs.
Clinician-in-the-loop
AI clinical output is always reviewed and signed by a clinician before it counts.
Consent & recording
Calls and recordings are handled with explicit consent and clear retention rules.
Compliance posture
What we align to, and where we are.
"Aligned" and "ready" mean we are built to the standard's requirements. We will only say "certified" once independently audited. Here's the honest picture.
Aligned
Built to HIPAA's safeguards for US-facing deployments. BAA available on request.
Ready
Data-subject rights, DPA support, deletion/export workflows and EU-region hosting for clients in scope.
Available
Business Associate Agreement and Data Processing Addendum available for qualified customers.
Integration-ready
Standards-based integration patterns for EHR, scheduling, billing and patient-app workflows.
We use "aligned" and "ready" language deliberately. We only claim independent certification after the relevant audit or certification is complete.
Documentation
Paperwork your IT and legal teams expect.
We provide the agreements and references procurement and security reviewers ask for, so an evaluation doesn't stall.
Data Processing Addendum
Our standard DPA covering processing, sub-processors and residency. Read the DPA →
Business Associate Agreement
BAA available for HIPAA-covered entities on request.
Privacy & retention
Clear policies on what we store, why, and for how long. Privacy policy →
✓Encryption in transit & at rest
✓RBAC & SSO support
✓Audit logs & access reviews
✓Data residency selection
DPAAvailable before onboarding
Bring your security questionnaire.
We'll walk your team through our controls and provide the documentation you need to sign off.