Compliance, stated plainly
Is Call Tracking HIPAA Compliant?
We make no HIPAA compliance claims about our platform. What we can do is explain what HIPAA is, who it applies to, and the questions to ask any vendor — including us — before handling sensitive call data.
- No HIPAA compliance claims made
- HIPAA: a US framework
- Vendor questions listed in writing
HIPAA and call tracking
Is your call tracking HIPAA compliant?
We make no HIPAA compliance claims or representations about the platform. If your organisation operates under a compliance regime with specific requirements, raise them with us directly before relying on the service for regulated call flows.
Does HIPAA even apply to my Australian business?
HIPAA is a United States framework covering covered entities and their business associates handling American protected health information. Whether it reaches your organisation is a legal question — ask your adviser. Australian privacy law obligations are separate and also apply.
What should I ask a call tracking vendor about compliance?
Where call recordings are stored and who can access them, retention and deletion controls, how data is protected in transit and at rest, and whether the vendor will document any assurances it makes in the contract.
Do we need call recording for compliance reasons?
Recording obligations run in both directions — consent requirements apply to recording conversations in Australia. Compliance and recording policy is an organisational decision; take advice rather than defaulting either way.
Is call tracking HIPAA compliant? Any vendor who answers that with a breezy "yes" is telling you more about their marketing than their platform. Our answer is the honest one: we make no HIPAA compliance claims about our call tracking platform. What this page can do is explain the framework, who it actually reaches, and the questions a compliance-minded buyer should put to any vendor — including us — before routing sensitive conversations through any tracking system.
What HIPAA is, and who it reaches
HIPAA — the Health Insurance Portability and Accountability Act — is a United States framework governing protected health information held by covered entities (providers, plans, clearinghouses) and their business associates. Whether and how it reaches a particular Australian business, particularly one serving US patients or partners, is a legal question for your adviser, not a marketing question for your phone provider. Australian privacy law imposes separate obligations that apply in any case.
The questions to ask any call tracking vendor
Put these in writing, to us or to anyone:
- Storage and access. Where are call recordings stored, in which jurisdiction, and who can access them?
- Retention and deletion. Can recordings be retained, exported and deleted on a schedule your policy controls?
- Protection. How is call data protected in transit and at rest?
- Contractual assurances. Will any compliance representation the vendor makes appear in the agreement — or only on the website?
If a vendor claims HIPAA compliance, the follow-up is always the same: a business associate agreement or equivalent contractual commitment, not a badge on a pricing page.
Where call tracking fits in a compliance-conscious setup
The mechanics of per-number tracking — a number per campaign, network-level counting, reports in the web console — are described in how call tracking software works. If your call flows carry sensitive information, the decision to record, route or track them belongs to your compliance process: talk to us via the contact page about your requirements before you connect. The product overview is at call tracking, with pricing on the pricing page.
Questions before claims
Discuss your requirements with us
If your call flows carry sensitive information, tell us before you connect — not after.