Patient privacy is the product, not a feature
Orbix Health is designed around the HIPAA Security Rule. We sign a Business Associate Agreement with every customer before any patient data is stored.
Protecting the data
- Encryption
- Data is encrypted in transit with TLS and at rest in the database and file storage.
- Isolated accounts
- Every practice’s data is separated from every other practice at the database level.
- Backups
- Encrypted daily backups with tested restores.
Controlling access
- Multi-factor sign-in
- Required for every user.
- Roles and permissions
- Front desk, clinical, billing and lab staff each see only what their job needs.
- Audit log
- Every chart view, edit, export and sign-in is recorded and can be reviewed by the practice owner.
AI with guardrails
- Human approval
- AI drafts are highlighted and never saved to the chart until a clinician approves them.
- Free mode stays local
- Free dictation runs inside the browser, so audio does not leave the computer.
- AI is optional
- Practices that prefer not to use AI simply leave AI mode off.
Security questions
Data is encrypted in transit and at rest, every user signs in with multi-factor authentication, and every chart view and change is recorded in an audit log. We sign a Business Associate Agreement with customers before any patient data is stored.