Business Associate Agreement
Signed with every practice before any patient data flows.
Built to protect your patients' information.
We sign a Business Associate Agreement (BAA) with every practice before going live.
How we protect patient data
US hosting and encryption
Patient data is hosted in the US and encrypted, down to individual records.
Separated by practice
Each practice's data is isolated. Staff see only their own department.
Verified callers
ACES Denti confirms a caller's identity before sharing any appointment or account details, and never shares more than the call needs.
Secure access
Role-based logins with single sign-on and multi-factor authentication.
Full audit trail
Changes and access to patient records are logged in a tamper-evident record.
How we treat callers
AI disclosure
Every call starts with ACES Denti saying it's an AI receptionist.
A person on request
Any caller can ask for a person and is transferred.
Consent for outreach
Opt-ins and opt-outs are recorded per channel, and outbound campaigns run a test before anything is sent.
No clinical advice
ACES Denti doesn't diagnose or give medical advice; emergencies go to 911 or your on-call line.
Reviewed before go-live
Disclosure and consent requirements are checked for your state before your agent answers a real call.
Security FAQ
Will you sign our BAA, or do we sign yours?
We provide ours and can review yours.
Where is our data stored?
In the United States.
Who at ACES can access our data?
Only the team members who support your account, through logged access.
Can we export or delete our data?
Yes. Ask us and we'll handle it in line with your BAA.