How does Voksha handle sensitive medical history and injury details securely?

For Chiropractors

On every plan, call data is encrypted with AES-256 at rest and TLS 1.3 in transit, and Voksha is SOC 2 compliant and ISO 27001 compliant. For medical history, current symptoms, injury descriptions and insurance information, which are protected health information, chiropractic practices should be on the Enterprise plan, which is where HIPAA compliance and a signed Business Associate Agreement are available; Premium and Starter don't include the BAA. In practice, this matters for chiropractic intake because a first call often includes fairly detailed personal medical information: prior injuries, surgeries, current medications, pregnancy status if relevant to treatment planning, and for accident cases, a description of how the injury happened. Rather than that information sitting in a shared voicemail box that any staff member can access or on a sticky note at the front desk, it's captured into a structured call summary that only the people you choose receive, ready for staff to enter into ChiroTouch, Platinum System, Genesis, or Jane App, where your existing access boundaries apply. On Enterprise, access controls and logging also mean there's a record of when patient information was captured and accessed, which matters if a practice ever needs to demonstrate its data handling process, whether for a routine HIPAA risk assessment, in response to a patient records request, or during a PI case where opposing counsel questions how the practice documented the initial injury report. Voksha doesn't take payments on Starter or Premium; taking payments is an Enterprise-only feature, so on other plans a patient wanting to pay a copay or deposit is passed to your staff and your existing payment processor.