Trust & security
Security and privacy, built in from day one
Healthcare data deserves more care than ordinary marketing data. This is how we handle it.
Trust, security & compliance
Security and privacy are part of the design, not an add-on.
Healthcare data deserves more care than any other. Here is how Xealx protects it.
Compliance & certifications
- HIPAAPending verification
- BAA availablePending verification
- SOC 2Pending verification
- WCAG 2.2 AAPending verification
BAA-scoped PHI projects
Work that touches protected health information starts with a Business Associate Agreement.
Encryption everywhere
Data encrypted in transit and at rest, with secrets kept off the browser.
Least-privilege access
Role-based permissions and audit logs for every system we build.
No PHI in marketing
Marketing forms and ad tools never collect patient health information.
Human oversight
Clinical and sensitive decisions always stay with qualified people.
Your server, your data
Self-hosted databases mean your data lives where you decide.
What to share in our forms
Our forms and chat are for business inquiries only. Never send patient information.
Please share
- Your name and work email
- Organization name and type
- Your website
- Goals and services of interest
Please do not share
- Patient names or contact details
- Medical records, diagnoses, or results
- Insurance or payment information
- Any other protected health information
Ready to see it for your practice?
A live demo with examples from your specialty. Business details only, no patient data.