Data protectionLess data, by design.
Leady reads what it needs to book a chair and nothing it does not. What it holds stays in the United States, is kept only as long as you want it, and is returned or deleted when you ask.
From the first ring to deletion.
Five stages, the same for every call and every license. At each one, the question is the same: what is the least we need?
- 01
Collect
What the caller says, the number they call from, and what booking needs from your PMS. The caller hears first that the call is transcribed.
Being built - 02
Use
To answer, hold a chair, write a communication log entry and create a callback task. Nothing derived from your calls leaves your practice’s account.
Being built - 03
Store
Transcripts in our own database, on AWS in a United States region. Database storage is encrypted.
In place - 04
Retain
Transcripts are kept for the life of your account until a default period is set. Your practice choosing its own periods is being built.
Being built - 05
Delete
On request we send you a copy and delete ours. Automatic deletion when a period ends is being built.
Being built
One cloud account, in the United States, under a BAA.
Every part of a call that touches patient data runs in one place, and we can name it.
- In place
On AWS, in a United States region
All practice data lives on Amazon Web Services (AWS), in a United States region, under our Business Associate Addendum with AWS.
- In place
One account, not a chain of vendors
The voice line, the speech model and the database run inside one AWS account, and file storage will be added to the same account. The speech model runs through AWS’s managed model service in that account. Our AWS organization has the AI-services opt-out policy set.
- In place
The improvement clause is off
An optional supplier clause that would allow our content to be used to improve their services is off, and it stays off.
- In place
The BAA comes before the first call
No call is answered before the practice signs a BAA with Leady.
- In place
Nobody at Leady listens
Nobody at Leady listens to call audio. Audio recording is off in every state until counsel clears that state.
What we hold, and what we never touch.
The PMS connection reads only what booking needs, with a key your practice enables and can revoke. The rest of your records stay where they are.
From the call
Collected- Transcript of the callWhat was said, both sides, stored in your portal
- The caller's phone numberSo your team can call back
- Name and reason for the callAs the caller gives them
- Appointment detailsTime, chair and provider for a hold or booking
Never collected
Never- Clinical notes, imaging, ledgers, payments, payrollNot read from your PMS
- Voice printsNo speaker identification, on any license
- Card numbersLeady never takes card payments on a call
- Insurance claims or plan detailsNever what a specific patient's plan covers
Protected in transit and at rest.
The technical sheet, as it stands today. Where a control is still being set up, it says so.
- In transit
Connections to our database are encrypted, and the server's identity is verified. A connection that cannot be verified is refused.
In place- At rest
Our database storage is encrypted, and protected against accidental deletion.
In place- File storage
Encryption keys and a rule that refuses any unencrypted connection, for stored files. No files are stored yet.
Being built- Secrets
Keys and passwords are kept out of code. Every code change is scanned for leaked secrets.
In place- Web addresses and logs
No patient details in web addresses. Our application logs keep patient details out, with an automated check on every change.
In place- Residency
Everything that holds practice data runs on AWS in a United States region.
In place- Backups
The database is backed up automatically every day. A tested restore is being built.
Being built
The most sensitive data is the data we do not keep.
A voice is a biometric identifier: a transcript can be masked, a voice cannot. So audio is off, voice prints never exist, and notifications say only that something is waiting.
Audio off, state by state
Recording is off in every state until counsel clears that state's consent rules. No state is cleared today. Once yours is, your practice decides whether to switch it on.
Nobody at Leady listens
No person at Leady plays call audio, the founder included, and the database refuses a play by a Leady administrator. Only your practice's authorized staff can, in the portal.
Notifications carry no patient data
Email notifications carry no name, phone number or visit reason. The details stay in the portal, for the roles you allow.
Your data leaves with you.
Anything we hold for your practice is yours. The BAA sets out how it comes back to you and how ours is deleted.
- Day 0
Termination date
Calls stop being answered. Your practice switches call forwarding off.
- Days 1 to 30
30-day transition
For exporting your data. Transcripts and records are yours; we send you a copy on request.
- After day 30
Deletion under the BAA
We delete what we hold for you, as the BAA sets out.
- Copy on request, today
- Export from the portal Coming
- A paused account can still sign in and read its past data
Questions about data protection
See all questionsDo you read our clinical notes or X-rays?
No. Clinical notes, imaging, ledgers, payments and payroll are not read. The connection reads appointments, chairs, providers, appointment types and the patient details booking needs.
How long do you keep transcripts?
For the life of your account, until a default retention period is set and written here. You can ask us to delete them at any time, and we will tell you exactly what we hold for you.
Are calls recorded?
Not today. Audio is off in every state until counsel clears that state. Once yours is cleared, your practice decides, sets the retention period, and recordings are then deleted automatically.
Is our data used to train AI for other practices?
Nothing derived from your calls leaves your practice's account. Our AWS organization has the AI-services opt-out set, and the optional clause that would let a supplier use our content to improve its services is off.
What is in the email notifications?
Only that something is waiting, with a link to the portal. No patient name, phone number or visit reason.