HIPAA Compliance – Desmatix

Your Patients' Privacy Is Our Priority

Mental health practices deal with some of the most sensitive information a person will ever share. We understand that trust isn't optional in this field — it's the foundation of everything you do with your clients, and it's the foundation of how we build for you.

Desmatix is built specifically for mental health practices, which means privacy and compliance aren't an afterthought — they're part of how every system is designed from day one.

Our Commitments

Our Approach to HIPAA
Compliance

We are currently building our infrastructure and partnerships to support full HIPAA
compliance, including signed Business Associate Agreements (BAAs), for every practice
we work with.

Business Associate Agreements (BAA)

We are actively setting up our BAA process so that every practice we work with has a clear, signed agreement defining how patient data is handled, protected, and what happens in the event of any incident.

Data Minimization

Our systems are designed to only collect the information needed to do the job — a patient's name, contact info, and reason for reaching out — never more than necessary.

HIPAA-Aligned Tooling

We are selecting and building on infrastructure designed to support HIPAA-compliant workflows, so that every call, text, and chat interaction can be handled in a way that respects patient confidentiality.

Access Control

Patient data is only accessible to systems and people directly involved in delivering your service — never shared, sold, or used for any purpose outside of helping your practice serve patients.

Transparency

Why We're Telling You This
Directly

Most agencies offering AI tools to healthcare practices don't talk about HIPAA at all — until a practice owner asks, and then it becomes a scramble.

We'd rather be upfront: we are in the process of formalizing our HIPAA compliance program, including our BAA agreements and infrastructure-level safeguards. We believe mental health practices deserve a vendor who treats this seriously from the start — not one who treats it as a checkbox after the fact.

If HIPAA compliance and a signed BAA are required before we begin working together, we're happy to have that conversation directly and transparently before any patient data is ever involved in your systems.

Have Questions About How We
Handle Data?

We know this matters to you — and it matters to us too. If you have specific questions about how your practice's patient data would be handled, reach out and we'll walk you through it honestly, including where we are in our compliance journey.