Source: https://vocarihealth.co/trust

Vocari security and assurance

# Security and compliance at Vocari.

Review controls, data-handling commitments, legal documents, and current assurance status for Vocari’s patient charts, conversations, and insurance workflows.

[Explore controls](https://vocarihealth.co/trust/controls) [Review documents](https://vocarihealth.co/trust/documents)

Assurance status

**Product safeguards active. HIPAA program underway.** Last reviewed September 1, 2026 [Start a security review](https://www.vocarihealth.co/contact)

**Patient audio**Not retained by Vocari

**Account access**Individual password-protected accounts

**Customer data**Workspace isolated

**Exceptions**Human escalation

Compliance status

## Current program status.

Each status distinguishes product controls, contractual readiness, administrative implementation, and independent assurance. Supporting evidence is available through a scoped security review where it exists.

Program in progress

### HIPAA readiness

Technical safeguards and the founder compliance package are prepared. Founder adoption, training evidence, vendor and customer BAAs, and final configuration verification remain before a compliance representation.

[View details](https://vocarihealth.co/trust/documents)

Template available

### Customer BAA

A complete customer BAA template is available for contracting review and execution with an eligible healthcare customer.

[View details](https://vocarihealth.co/trust/baa)

Planned

### SOC 2

Control design is being documented for a future independent SOC 2 examination. Vocari does not currently claim a SOC 2 report.

[View details](https://vocarihealth.co/trust/documents)

Core commitments

## How practice and patient data is handled.

Charts, conversations, and insurance findings are processed for the healthcare customer, scoped to its workspace, and tied to an authorized workflow.

-   Access is invite-only and protected by individual passwords.
-   Tenant credentials are encrypted and never returned to clinic users.
-   Provider events are authenticated and duplicate actions are rejected.
-   Vocari retains transcripts and structured outcomes, not patient call audio.
-   Sensitive-data access and selected administrative changes produce audit records.

Documentation

## Prepared for customer review.

[View all documents](https://vocarihealth.co/trust/documents)

[**Security overview** Public explanation of Vocari safeguards](https://www.vocarihealth.co/security) [**Privacy Policy** Website, account, and business data](https://www.vocarihealth.co/privacy) [**Patient Privacy Policy** Patient interactions and practice-controlled data](https://www.vocarihealth.co/patient-privacy) [**Business Associate Agreement** Complete template; execution required](https://vocarihealth.co/trust/baa)

## Evaluating Vocari for your organization?

Request a focused security review for architecture, controls, contracting, and deployment questions.

[Contact Vocari](https://www.vocarihealth.co/contact)