Role-based access control
Access to systems and data is granted by role, scoped to what the role requires, and reviewed. Access is never shared across a team.
Security and Responsible Data Handling
Healthcare billing involves sensitive information. This page describes the controls we operate, in plain terms, so your compliance lead can assess them properly rather than take a badge on trust.
The controls we operate
Individual named accounts
Every person works under their own credentials. Shared logins remove attribution, which is the first thing an investigation needs.
Secure authentication
Authentication controls appropriate to the systems your practice uses, applied consistently across the account team.
Controlled system access
Defined provisioning and removal steps when someone joins or leaves an account, so access does not outlive the reason for it.
Staff confidentiality requirements
Confidentiality obligations are contractual for everyone who touches an account, and are part of onboarding rather than an annual reminder.
Security and process training
Ongoing training on secure handling of sensitive information and on correct billing process, because most data incidents start as process errors.
What we do not claim
Marketing pages in this sector are full of compliance badges. We describe the controls we operate and confirm our certification or attestation position in writing during due diligence, where it can be checked properly. If a claim is not on this page, do not assume it.
Information we ask for on this website
Our forms collect business contact details and information about your practice's billing operation. They are not a channel for patient health information, and we ask you not to include any. If you need to share data as part of an assessment, we will agree a secure route for it first.
Questions from your compliance lead
We would rather answer a detailed security questionnaire early than discover a mismatch after onboarding has started. Send it over and we will complete it honestly, including the parts where the answer is "not yet".
Contact the team or email [email protected].
A full Privacy Policy, Terms of Use, Cookie Policy and Accessibility Statement are being prepared for legal review before launch.