Scope
This notice applies to Hellou AI services provided to US medical practices that handle protected health information (PHI).
Handling of PHI
We process PHI under HIPAA requirements, with access controls, encryption in transit and at rest, and audit logs.
We only access the PHI necessary to provide the service agreed with the practice.
Business Associate Agreement (BAA)
For HIPAA-covered clients, we sign a Business Associate Agreement (BAA) defining each party's responsibilities.
Incidents
We have procedures to detect, contain and notify incidents affecting PHI, in accordance with legal timelines.
Contact
For HIPAA compliance matters, write to us at hipaa@hellou.ai.
