Questions clinics ask us.

Yes. All PHI is encrypted at rest (AES-256) and in transit (TLS 1.2+). We sign Business Associate Agreements by default, run annual penetration tests, and audit-log every access to protected data. SOC 2 Type I is live; Type II is in progress and scheduled for completion this year.

Yes. We import from any FHIR-compliant system and accept standard CCD/CDA exports from Athena, eClinicalWorks, Dentrix, WebPT, DrChrono, and others. A typical solo-practice migration finishes inside one week; multi-location groups usually complete in two to three.

The scribe is constrained to the visit transcript and the patient's existing chart. Every generated sentence is traceable back to a source utterance, and nothing is committed to the chart until the provider reviews and signs it. We do not train on a clinic's data unless they explicitly opt in, and even then only on de-identified content.

Availity and Change Healthcare in production. Waystar and Office Ally are in active beta. We generate 837P claims, post 835 ERAs back to patient ledgers automatically, and surface denials with suggested corrective actions.

Your data is yours. You can export everything — charts, notes, attachments, billing history — as FHIR bundles or standard exports at any time, from the admin console, without talking to sales. We also offer a paid white-glove export for clinics moving to a system without native FHIR support.

A solo practice is typically seeing patients on ClinicPilot within five business days of signing. Group practices with legacy EHR data usually finish in two to three weeks, including data migration, template customization per specialty, and staff training.

Yes. ClinicPilot started with a mental health telehealth design partner, and our scribe works equally well over video as in person. We integrate with Zoom for Healthcare and Doxy.me, and have our own HIPAA-compliant video visit built in if you prefer one product.