Trust

Your data, handled like health data.

Clinwis is maintained under a BAA for every practice. This page summarizes the controls in place, who can see what, and the actions Clinwis takes on your behalf.

Dental Practice A and Dental Practice B are fictional example practices with illustrative numbers. They do not represent any real dental practice.

PHI minimization

What we ingest — and what we structurally cannot

We ingest
  • Production totals
  • Adjustments
  • Collections
  • AR aging
  • Appointment counts
  • Provider IDs
  • Expense lines
Never ingested
  • Patient names
  • Charts
  • X-rays
  • Clinical notes
  • Prescriptions

There is no field in our database for a patient's name.

Security & privacy

HIPAA

Signed BAA

Clinwis operates under a Business Associate Agreement with every customer practice. We handle production, patient, and financial data as protected health information.

SOC 2 Type II

In progress

Currently in the observation window with an independent auditor. Interim controls documentation is available on request under NDA.

Encryption

In transit & at rest

TLS 1.2+ for every request. AES-256 at rest for database, backups, and object storage. Keys managed by our cloud provider's HSM.

US data residency

US-only

Practice data is stored and processed in US regions. No cross-border transfer for primary storage, backups, or logs.

Never sold, never shared training

Guaranteed

Your data is never sold. We never use your data to train shared or third-party models. In-app AI runs on your data for your practice only.

Roles & access

RoleWhat they can see
OwnerEverything — full financials, valuation, and settings.
Office managerOperations — schedule, AR, expenses. No valuation or owner comp.
Your CPARead-only financials — P&L, cash, ledger, exports. No settings.
AssociatesTheir own production only — no practice-wide numbers.

Recent activity

WhenWhoAction
Today · 2:04 AMsystemNightly Dentrix sync completed (18,412 rows)
Today · 2:00 AMsystemQuickBooks Online sync completed
Yesterday · 4:41 PMDr. A (Owner)Viewed Worth · Levers toggled: Reduce owner dependence
Yesterday · 11:12 AMMaya R. (Office manager)Added manual expense — Supplies $842 (supply vendor)
2 days ago · 9:03 AMCPA export linkDownloaded November P&L (read-only share, expires in 5 days)

Every read, export, and edit is logged. Owners can pull the full audit log at any time.

Share your numbers

Share with your CPA

Creates a read-only link with your P&L, cash, and ledger. The link expires in 7 days and every open is recorded in the audit log.

Lender package

A 12-page PDF banks ask for when a dentist wants an acquisition loan: P&L, cash forecast, and valuation summary — generated as a secure, expiring link your lender opens. Never an attachment.

This page is maintained by Clinwis to answer common security and privacy questions. Enabled controls are shown here; certifications marked "in progress" are not yet issued. For contract language, request our BAA and DPA.