6 articles

Trust & Compliance for the healthcare front office.

Everything we have written on trust & compliance, newest first. Written for practice owners, not engineers.

Patient Estimates: The Estimate Your Front Desk Owes

Trust & Compliance

Good Faith Estimate Rules: What Your Front Desk Owes Patients

Most practices read the good faith estimate rule as an uninsured-patient rule. It is not. An insured patient paying cash triggers it too, on a deadline that starts the moment the appointment is booked.

Aug 28, 2026 · 10 min read

Recording Consent: Who Has to Say Yes Before You Record

Trust & Compliance

Call Recording Consent Laws for Medical Practices in 2026

Your phone system probably records calls by default. In 11 states that needs every caller to agree, and once patient details are inside, the recording becomes protected health information with its own rules.

Aug 21, 2026 · 10 min read

Records Release: Medical Records Release Automation

Trust & Compliance

Medical Records Release Automation: Meet the 30-Day Deadline

A records request that misses HIPAA's 30-day deadline is a real compliance risk. Here is the exact timeline, what you can legally charge, and what to automate safely.

Aug 17, 2026 · 11 min read

Data Security: The Security Questions a BAA Doesn't Answer

Trust & Compliance

AI Receptionist Security: What a Signed BAA Doesn't Tell You

A BAA proves legal accountability, not real security. Here is what to verify beyond HIPAA before trusting a vendor with patient calls long-term.

Aug 14, 2026 · 9 min read

Patient Texting Compliance: The Compliance Rule HIPAA Does Not Cover

Trust & Compliance

TCPA Compliance for Patient Texting: The Rule HIPAA Misses

HIPAA protects health information. TCPA governs whether you had the right to text a number at all. Here is what the narrow healthcare exemption actually covers.

Aug 8, 2026 · 10 min read

HIPAA Compliance: Can an AI Receptionist Be HIPAA Compliant?

Trust & Compliance

Is an AI Receptionist HIPAA Compliant? The Honest Answer

"HIPAA compliant" on a vendor homepage is a marketing claim, not a government stamp. Here is what actually protects patient phone data: a signed BAA, a no-PHI-by-default design, and 8 blunt vendor questions.

Jul 12, 2026 · 12 min read

The daily reality