Data residency
USA + Canada
USA infrastructure is ready. Canadian deployments keep patient data in Canada.
Privacy built into your front office.
HIPAA, PHIPA, and PIPEDA requirements shape how we handle information, access, and staff review.
Book a demo →Book Health trust evidence
Our approach.
Clear data handling. Defined access. Staff oversight.
Privacy context
PHIPA + PIPEDA
We address HIPAA requirements for US deployments and PHIPA, PIPEDA, and applicable provincial requirements for Canadian deployments.
Human oversight
Required
People retain clinical decisions, sensitive actions, final approvals, and exception handling.
System of record
Your EMR
We work with the clinic's existing systems rather than replacing the clinic's clinical record.
How the workflow runs
Review privacy at the workflow level.
Our approach emphasizes jurisdiction-specific privacy requirements and human-reviewed administrative workflows.
Scope the use case
Define the administrative task and information required.
Map safeguards
Review access, routing, integration, and oversight.
Confirm responsibilities
Align Book Health configuration with the clinic’s policies and legal obligations.
Where Book Health fits
Turn PHIPA and PIPEDA questions into implementation decisions.
Clear rules for information, access, retention, and staff review.
Purpose and minimum information
Define the administrative job and the patient information required to complete it.
Access and role boundaries
Align workflow access, review, and escalation with the responsibilities of MOAs, clinicians, operators, and technical teams.
Human oversight
Keep clinical judgment, sensitive actions, and uncertain exceptions with authorized people.
Policies and patient communication
Review how clinic privacy policies, consent practices, notices, and escalation procedures apply to the configured workflow.
Questions about Privacy
Our full AI privacy policy is available at /legal/privacy-policy.
Continue exploring
Meet your AI front office