Is Voksha HIPAA compliant, and does that even apply to a veterinary clinic?

For Veterinary Clinics

HIPAA governs human patient health information and does not legally apply to veterinary medical records, since animals are not HIPAA-covered patients. That said, veterinary practices still handle sensitive data that deserves HIPAA-grade protection in practice: client contact information, payment details, pet medical history, and in-house financing or CareCredit applications. Every Voksha plan is SOC 2 and ISO 27001 compliant, with AES-256 encryption at rest and TLS 1.3 in transit, and HIPAA (with a BAA), GDPR, and CCPA compliance are available on the Enterprise plan, which practices use less because of a legal HIPAA mandate and more because it's the right standard for handling client PII and payment-adjacent data responsibly, and because some corporate veterinary groups (VCA, Banfield, or PE-backed multi-location groups) require vendor compliance documentation that mirrors HIPAA standards as part of their vendor onboarding process regardless of whether HIPAA technically applies. If your practice accepts pet insurance claims or processes CareCredit/Scratchpay financing over the phone, GDPR compliance on Enterprise also matters if you have any UK or EU clients or corporate ownership with data residency requirements. For a typical independent single-location practice, the real compliance question is usually PCI concerns around phone-collected payment information rather than HIPAA, and Voksha is not designed to have callers read card numbers aloud; taking payments during a call is an Enterprise-only feature that routes through your existing PCI-compliant payment processor rather than being logged as call transcript text.