Security Practices
Pre-visit automation involves sensitive information. This page explains how we approach access, data handling, and security reviews with your practice. Retention and processing requirements are governed by the applicable service agreements.
Workspace Isolation & Access controls
Every practice's workflows and records live in their own workspace. Access is strictly scoped to authenticated members of that workspace — there is no cross-workspace visibility. Team members are invited individually with role-based access.
Handling Health Data & BAA
We execute a Business Associate Agreement (BAA) with your practice before any clinical files are uploaded. Service agreements govern all clinical data processing. Please do not submit Protected Health Information (PHI) through our public contact forms.
Minimal Data Footprint, By Design
Akaro only ingests the data necessary for the pre-visit workflow — nothing unnecessary from your core systems. We use what's needed to process the referral, and no more.
Akaro is designed with HIPAA-conscious architecture — including workspace isolation and access controls — but we do not claim formal HIPAA compliance certification.
To report concerns or if your practice needs documentation for a security review, contact us at hello@akaro.health and we'll walk through it directly.