This notice explains how AutomationRider approaches the Health Insurance Portability and Accountability Act (HIPAA) and why this website is not for patient information.
1. This website is not for patient information
The Site, its audit form and its demo chat are for practice professionals. Please do not submit protected health information (PHI) through them. A patient who wants to reach a practice should contact that practice directly.
2. Our services and patient information
A dental or orthodontic practice that is a HIPAA "covered entity" is responsible for the PHI it handles, including its choice of vendors and the agreements HIPAA requires with them. Whether and how patient information is handled by an assistant we build is settled with each practice in writing, before that happens. This notice does not create any commitment about how PHI will be handled; those terms come from the written agreement with the practice.
3. How we handle information
- Patient messages handled by our assistants are not used to train public AI models.
- Data is encrypted in transit and runs on Cloudflare's infrastructure.
4. Shared responsibility
Compliance is shared between us and each practice. The practice remains responsible for, among other things:
- its own HIPAA policies, workforce training and patient notices;
- deciding what information the assistant is given and what it may say;
- reviewing and approving its assistant's content;
- responding to patient requests to access, amend or receive an accounting of their records.
If a patient contacts us with a request about their information, we will direct them to the practice.
5. Emergencies and clinical care
Our assistants are not a substitute for clinical judgment. They are designed to flag urgent messages and direct patients to call the practice. Patients with an emergency should call the practice or 911.
6. No certification, no legal advice
There is no government "HIPAA certification" for software or vendors, and using our services does not by itself make a practice HIPAA compliant. This notice is general information and not legal advice. Practices should consult a qualified attorney about their obligations.
7. Questions
To discuss HIPAA and patient information before using our services, use our contact form and mention your HIPAA question.