How we handle patient data
An AI front desk handles protected health information from the first hello: a patient's name and appointment time, linked to your practice, is PHI. This page sets out where that data lives, how we protect it, and what our assistants are built not to do.
What counts as patient data at the front desk
Under HIPAA, information that identifies a patient and relates to their care or payment is protected health information (PHI). For a front-desk assistant, that includes call transcripts, chat messages, names and phone numbers linked to your practice, appointment details, and anything a patient says about why they are getting in touch.
Where it lives
- Data we store is hosted in US East and US West regions.
- Each practice's data is kept separate from every other practice's.
- Our database platform, Supabase, operates under a Business Associate Agreement with Valtair.
What our assistants are built not to do
- Diagnose, interpret symptoms, or give medical advice.
- Discuss test results or approve prescriptions.
- Handle emergencies. They are set up to tell anyone describing one to call 911.
How we protect it
- Encryption in transit and at rest.
- Conversations and actions logged so your team can review them.
Frequently asked
Is patient data stored in the US?
Is our data used to train AI models?
Do patients know they are talking to an AI?
Can we review what the assistant said to a patient?
This page describes Valtair's own practices for US healthcare deployments. It is not legal advice, and your practice's obligations under HIPAA are yours to assess with your advisers.
Have questions about your practice's data?
Ask us anything about how your practice's data would be handled, in a short call.