Security & Compliance

CognIQ handles protected health information every day. Here is how we keep it safe.

Protecting the Data

  • Built for HIPAA

    CognIQ works under HIPAA as your practice’s business associate. The companies that host, transcribe and process your data with AI are bound by contract to protect it, with business associate agreements where they apply.

  • Encrypted in transit and at rest

    Audio, transcripts, notes and codes travel over encrypted connections and are encrypted where they are stored.

  • Every access logged

    Each time someone opens patient information, generates a note or pushes to the EHR, it’s recorded, so your practice can see who accessed what, and when.

  • Separated by practice

    Each practice’s data is kept apart from every other practice’s, and each person sees only the records their role allows.

Protecting Access

  • Two-step sign-in

    Protect your account with a code from an authenticator app on your phone. Sign-in uses the code your practice gives you, and password resets are confirmed by email.

  • Nothing kept on your computer

    CognIQ keeps only your sign-in and practice settings on your computer. Patient information stays on our secure servers, and recording details are cleared when you close the browser.

  • Your EHR keys stay off your computer

    With eClinicalWorks, CognIQ connects to the chart from our secure servers, so your computer never holds the keys to your EHR.

  • You stay in control

    Nothing reaches the chart until you review it. Notes, codes and suggested orders are drafts until you approve or push them, and suggested orders are never placed for you.

Questions About Security?

For a security review, a business associate agreement or a compliance questionnaire, email support@cogniq.ai. See also our Privacy Policy.