Feature · PII
PII · security & compliance
How we protect patient and clinic data — while HIPAA compliance for US customers is under development.
We do not claim HIPAA certification today. We still encrypt, back up, and compose audited specialists.
Cloudflare, Twilio, and Stripe publish their own compliance pages — we link out so you can verify the source.
01 · Deep dive
What this feature actually is
HeyDental handles PII and clinic operations data as part of the dental practice OS.
We are currently under development for HIPAA compliance for our US customers. Until that program is complete, we do not claim HIPAA certification.
We still design for encryption, backups, least privilege, and audited specialist platforms — Cloudflare, Twilio, and Stripe.
02 · How it works
From ask to done — one loop
Built as a real surface in the practice OS — not a brochure paragraph.
- 01 · Protect the dataEncrypt and isolate offices.
- 02 · Survive the bad dayBackups and recovery.
- 03 · Compose audited platformsLink out to vendor compliance pages.
03 · How we protect data
Practices we take seriously
Encryption, backups, least privilege, and specialist platforms — before and after HIPAA certification lands.
- 01Encrypt
TLS in transit; encrypted storage at rest.
- 02Back up
Routine backups and recovery posture.
- 03Compose specialists
Cloudflare, Twilio, Stripe — verify their pages.
04 · Product illustrations
See the surface
UX-style illustrations — fictional Lumen only. Each tile echoes the real product layout without photo screenshots.
05 · What you get
Included with this building block
- Encryption in transit and at rest
- Backups and recovery posture
- Least-privilege office vs platform roles
- Cloudflare compute & storage · Twilio SMS & telehealth · Stripe payments
- Clear status: HIPAA under development for US customers — not a claim today
05b · Platforms
Compliant platforms we stand on
We compose specialists that publish their own audits — then link to their compliance and reliability pages so you can verify the source.
- Cloudflare Edge compute (Workers), DNS/TLS, DDoS, and object storage.
- Twilio SMS and telehealth video. HIPAA-eligible products with a BAA where PHI rides.
- Stripe Payments — card data stays with Stripe; we keep tokens, not PANs.
06 · Why clinics care
Robust, reliable, and in the same OS
- US HIPAA in progressUnder development — not a claim today.
- Security practices nowEncryption, backups, least privilege.
- No DIY card vaultStripe tokens payments.
Ready to see the full platform?
Compare approaches, browse every feature, or join the waiting list.