Healthcare privacy & BAAs
Lucea is designed to support HIPAA-compliant workflows. We enter into Business Associate Agreements with the healthcare organizations we support.
Home Security & privacy
Protecting the trust
Protecting the trust
behind every call.
Healthcare privacy, accountable access and independent assurance. Explore our safeguards and the documentation behind them.
Independent assurance
SOC 2 Type I
examination complete.
Request access to our independent SOC 2 Type I report and review the system and controls covered by the examination.
A Type I examination evaluates the design of controls at a specific point in time for the system covered by the report.
Request the report
Through the Lucea Trust Center
Our safeguards
Built for healthcare workflows.
Access controls
Lucea uses authenticated access and practice-level permissions to help restrict access to practice information.
Audit logging & accountability
Lucea records key authentication and application events to support accountability and security review.
Encrypted voice transport
Call audio and signaling use encrypted transport between Lucea’s production phone gateway and voice platform.
Before rollout
Understand how your data is handled.
Work through these questions with our team, in the context of your workflow and agreements.
Discuss your requirements- What information does the workflow use?
- Review the call audio, transcripts, notes and other information involved in your proposed setup.
- Who can access the information?
- Review user access, practice permissions and the responsibilities of your team and Lucea.
- How do AI and service providers use data?
- Review the services involved, their permitted uses of information and model-training terms.
- How long is information kept?
- Review storage periods, deletion requirements and the agreements for your deployment.
Let’s work through your security review.
Connect with our team about your assessment, deployment requirements or security documentation.