Security and Privacy

Protect patient information. Keep your practice in control.

Encryption, verified access, activity logging, data separation, consent, and practitioner approval are built into RunPractice workflows.

Core security controls.

Encryption

Information is encrypted in transit and at rest.

Controlled access

Only authorized users can access patient and practice information.

Practice-level separation

Each practice’s information remains separated and connected to the correct account.

Activity logging

Relevant verification, changes, approvals, and handoffs are recorded.

Patient and practitioner control.

Verified patient access

Identity is verified before patient-specific information is shared or appointments are changed.

Consent before recording

Recording begins only after patient consent is confirmed.

Practitioner approval

Clinical drafts must be reviewed and approved before becoming final.

Connected systems

Limited to the approved workflow.

RunPractice limits connected-system access to the information required for each configured workflow.

Business Associate Agreements are maintained with applicable vendors that handle protected health information.

Available controls depend on each system and integration.

Card information stays with Stripe.

Patients enter payment information directly through Stripe. RunPractice AI conversations do not collect card details.

Processed by Stripe

Security across every patient interaction.

Protect information, control access, and keep clinical decisions with the practitioner.