Skip to main content

diginetdental

Start Free Trial — 30 Days
HIPAA Compliance — DigiNetDental
Compliance

HIPAA Compliance

DigiNetDental is fully HIPAA compliant. We take the privacy and security of your patients' health information seriously.

HIPAA Compliant Platform
← Back to DigiNetDental

✓Our HIPAA Commitment

DigiNetDental operates as a HIPAA Business Associate for all dental practices using our platform. We are fully compliant with the HIPAA Privacy Rule, Security Rule, and Breach Notification Rule.

The Health Insurance Portability and Accountability Act (HIPAA) establishes national standards for protecting sensitive patient health information. As a technology platform serving dental practices (Covered Entities), DigiNetDental is classified as a Business Associate under HIPAA and is legally bound to protect all Protected Health Information (PHI) we access or process.

Technical Safeguards
Encryption, access controls, audit logs, automatic logoff, and secure data transmission
Administrative Safeguards
Policies, procedures, workforce training, risk assessments, and incident response plans
Physical Safeguards
Facility access controls, workstation security, and device and media controls

2Business Associate Agreement (BAA)

We Sign a BAA With Every Practice

Before processing any Protected Health Information (PHI), DigiNetDental executes a Business Associate Agreement with your dental practice. This is a legal requirement under HIPAA and demonstrates our commitment to protecting your patients' data.

Request Your BAA

Our BAA covers:

  • Permitted uses and disclosures of PHI
  • Our obligations to implement appropriate safeguards
  • Breach notification procedures and timelines
  • Your rights to access and amend PHI
  • Obligations upon termination of services
  • Subcontractor compliance requirements

3Technical Security Measures

We implement robust technical controls to protect PHI:

✓
End-to-End Encryption: All data transmitted between patients, our AI agent, and your systems is encrypted using TLS 1.3
✓
Encryption at Rest: All stored PHI is encrypted using AES-256 encryption on SOC 2 Type II certified infrastructure
✓
Access Controls: Role-based access control ensures only authorized personnel can access PHI. Each dental practice can only access their own patient data
✓
Audit Logging: All access to PHI is logged with timestamps, user identity, and action taken for complete audit trails
✓
Automatic Session Timeout: Dashboard sessions automatically expire after periods of inactivity
✓
Secure Authentication: Multi-factor authentication available and required for admin access
✓
Vulnerability Management: Regular security assessments and penetration testing to identify and remediate vulnerabilities

4PHI We Access & How We Use It

DigiNetDental accesses only the minimum PHI necessary to provide our services:

✓
Patient Phone Numbers: Used to identify callers and link appointments. Never shared with third parties.
✓
Patient Names: Extracted from call transcripts for appointment records. Stored securely and accessible only by your practice.
✓
Appointment Details: Date, time, and appointment type. Synced directly to your PMS or Google Calendar.
✓
Call Recordings & Transcripts: Stored encrypted for your review only. Not used for AI training without explicit consent.

We do NOT access, store, or process clinical health records, medical histories, diagnoses, treatment plans, insurance information, or Social Security numbers through our platform.

5Breach Notification

In the unlikely event of a security breach involving PHI, we are committed to:

  • Notifying affected dental practices within 24 hours of discovering a breach
  • Providing a detailed breach report within 72 hours including nature of breach, PHI involved, and remediation steps
  • Assisting practices with their HIPAA breach notification obligations to patients
  • Cooperating fully with HHS Office for Civil Rights investigations
  • Implementing immediate containment measures upon breach discovery

To report a suspected breach or security concern, contact us immediately at hello@diginetdental.com or call 571-582-4573.

6Subcontractors & Third Parties

We work with HIPAA-compliant subcontractors who have signed BAAs with us:

✓
Supabase — Database hosting. SOC 2 Type II certified, encrypted storage, HIPAA-eligible infrastructure.
✓
Retell AI — Voice agent technology. HIPAA Business Associate Agreement in place, encrypted audio transmission.
✓
Vercel — Application hosting. SOC 2 Type II certified, secure infrastructure with access controls.

We do not share PHI with any subcontractor that has not signed a BAA and demonstrated HIPAA compliance.

7Your Practice's HIPAA Responsibilities

As a Covered Entity, your dental practice also has HIPAA obligations when using DigiNetDental:

✓
Patient Notice: Inform patients that calls may be handled by an AI voice agent and recorded
✓
BAA Execution: Execute a Business Associate Agreement with DigiNetDental before using our services
✓
Access Management: Ensure only authorized staff have access to your DigiNetDental dashboard
✓
Breach Reporting: Report any suspected breaches to us immediately so we can investigate and assist

If you have questions about your practice's HIPAA compliance obligations, we recommend consulting with a qualified healthcare attorney or compliance officer.

8Contact Our Compliance Team

For HIPAA-related questions, BAA requests, or to report a security concern:

DigiNetDental Compliance Team

Diginetplore LLC

14388 Westminister LN, Dale City, VA 22193

hello@diginetdental.com

571-582-4573

HIPAA compliance inquiries are treated as high priority and responded to within 1 business day.