← Back to Recamply
🏥

Healthcare Security Practices

Recamply implements strong security practices but is not HIPAA-compliant. Do not use with Protected Health Information (PHI) without explicit legal review.

⛔ HIPAA and PHI: Our Clear Position

•Recamply is not HIPAA-compliant. We are not a HIPAA-covered entity or business associate.
•We do not sign Business Associate Agreements (BAAs). No exceptions.
•Do not use Recamply with Protected Health Information (PHI).
•Using Recamply with PHI creates liability for your organization.
•If you work in healthcare: Use Recamply for non-PHI administrative work only, or use a HIPAA-compliant alternative.

⚠️ Dental AI Tools — Clinical Disclaimer

Recamply's dental tools generate AI-suggested clinical content only. This content:

•MUST be reviewed and edited by a licensed dental professional before use
•Is not a substitute for clinical judgment
•May not comply with your state dental board requirements
•Does not constitute clinical advice or patient care
•Is generated by AI and may contain errors

You are solely responsible for compliance with dental licensing requirements and patient safety.

⚠️ General Disclaimer

It is your responsibility to evaluate whether Recamply meets your organization's compliance needs. We strongly recommend consulting with your compliance officer or legal counsel before using Recamply in any regulated environment.

What We Do to Support Privacy

🗑️

Limited Data Retention

Transcripts are not intentionally stored in our database unless you choose to save them. However, error monitoring systems (Sentry) may retain partial content in logs for up to 30 days. Browser cache may also retain data. We cannot guarantee zero retention of all traces.

🔐

Strong Encryption

Data is encrypted in transit (TLS 1.3) and at rest (AES-256). Passwords are bcrypt hashed.

🔑

Strict Access Controls

Row Level Security (RLS) ensures users can only access their own data.

🚫

No Recording — No Bot

Recamply never joins meetings or records audio. You control exactly what gets processed.

📋

Activity Logging

User actions are logged (logins, data access, deletions). However, these logs may not meet HIPAA Audit and Accountability Rule (164.312(b)) requirements. Consult your compliance officer.

👥

Limited Human Access

Transcripts are processed by automated AI systems. Support staff do not intentionally access customer content. However, error logs and support requests may expose partial content.

What Recamply Does NOT Provide

✕HIPAA certification or compliance guarantee
✕Business Associate Agreements (BAAs) — under any circumstances
✕Dedicated healthcare infrastructure
✕Legal advice on your compliance obligations
✕Guarantee that use with PHI meets your organization's requirements

How Healthcare Teams Use Recamply Responsibly

✓Use for internal staff meetings and administrative discussions — not patient consultations
✓Remove or anonymize patient identifiers before pasting transcripts
✓Use for clinical note templates and documentation workflows where no PHI is entered
✓Consult your compliance officer before using in any regulated context
✓Use zero-retention mode — do not save recaps containing patient information
Healthcare Organizations

If your organization requires HIPAA compliance or Business Associate Agreements, Recamply is not suitable for your needs. We recommend using a purpose-built HIPAA-compliant alternative.

For general questions about our security practices, contact support@recamply.com.

Security Policy · Privacy Policy · Terms of Service · support@recamply.com