Security & compliance
Security and compliance for healthcare clients
What this website collects, who processes it, and what we agree before handling patient information. No patient data is shared with us until we agree in writing what is processed, where, by which subprocessors, and under which agreement.
- Agreed in writing first
- Calls announce recording
- Necessary-only cookies by default
- HIPAA · UK GDPR · PIPEDA
This website
What this site collects
Contact form
Your name, email, phone, practice and message are emailed to our team inbox. We use them only to reply and arrange the demo.
Chat assistant
Messages typed into the chat are sent to Google's Gemini service to generate a reply. We ask visitors not to share patient or health details there.
Demo bookings
Booking details are stored in our own database on our server so we can send your invite and reminders. Manage links are signed and private. Kept for 24 months after the demo.
Analytics and ads measurement
Google Analytics and the Meta Pixel load only if you accept them in the cookie banner. Necessary-only is the default.
Full details and your rights: privacy policy.
Rules by country
The laws we plan around
A summary, not legal advice. Each practice should check its own obligations.
United States: HIPAA
A practice may only share protected health information with a vendor under a signed Business Associate Agreement, and the vendor needs BAAs with its own subprocessors. Call recording consent varies by state, and AI-voice calls to patients need prior express consent under the TCPA.
United Kingdom: UK GDPR and PECR
Health data is special category data. Processing needs a lawful basis and a condition, a written data processing agreement, and appropriate security. Marketing messages need consent or a soft opt-in under PECR.
Canada: PIPEDA and provincial law
Patient information needs consent and safeguards under PIPEDA and provincial health privacy laws such as Ontario's PHIPA, with an agreement between the clinic and the vendor.
Do you sign a Business Associate Agreement (BAA)?
Ask us on the demo call. We confirm in writing, before any set-up, whether a BAA is available for the service you want. Nothing on this website should be read as a promise that one is in place.
Do you sign a data processing agreement for UK practices?
We agree the data processing terms in writing before any patient data is processed, and confirm the details on the demo call.
Does the AI receptionist record calls?
Only if you want it to. When recording is on, the assistant announces it at the start of every call.
How do I report a security concern?
Email info@sktechs.com with "Security" in the subject line. We acknowledge reports and keep you updated on what we do about them.
See if it fits your practice in 15 minutes.
A short video call. We show you what we'd change and what it costs.
Before you book, read our security & compliance notes and how pricing works.