Is Parlytics HIPAA compliant?

We operate with HIPAA principles in mind. Business Associate Agreements (BAAs) are available on request. Parlytics does not store protected health information (PHI) as a primary function — it is a dental supply chain platform, not an EHR.

Where is our data stored?

All data is stored on US-based infrastructure. No data leaves the United States.

Can other dental groups see our pricing data?

No. Each organization’s data is fully isolated. Your vendor contracts and pricing are never visible to other users or other DSOs.

What happens to our data if we cancel?

Your data remains accessible for 30 days after cancellation for export. After that period, it is securely deleted upon request.

Yes, Business Associate Agreements are available upon request. Contact hello@parlytics.ai.

How do I report a security vulnerability?

Email security@parlytics.ai. We respond to all security reports within 48 hours.

Security & Trust

Security you can present to your board.

Parlytics is built for healthcare-adjacent environments where data integrity, access control, and audit trails aren't optional.

Questions? hello@parlytics.ai

Data Protection

Your DSO's data is encrypted and isolated

Parlytics encrypts all data in transit (TLS) and at rest
Each DSO's data is logically isolated — your data is never commingled with another organization's
Parlytics stores no data outside the United States
The vendor and pricing data you upload is yours — Parlytics never shares it with other organizations or vendors

Access Controls

The right people see the right data

Role-based access control — admins, regional managers, and office managers each have different permission levels
Office managers can only see data for their assigned practice
Every login is authenticated — no shared passwords or guest access
Session management with automatic timeouts

HIPAA Posture

Built with HIPAA in mind

Parlytics is a supply chain platform, not an EHR — it does not store protected health information (PHI) as a primary function
Where patient-adjacent data appears (implant lot traceability, procedure-based planning), access is logged with user, timestamp, and action
Business Associate Agreements (BAAs) are available upon request
Audit logs are append-only and tamper-resistant

Audit & Compliance

Every action in your dental supply chain leaves a trace

Comprehensive audit logging across all data operations
Logs capture who accessed what, when, and from where
FDA recall traceability — implant lot numbers tracked from receipt through patient placement
Export-ready compliance reports

Vulnerability Management

We take security vulnerabilities seriously

Dependencies are monitored and updated regularly
Security findings are addressed on a priority basis
Report a security concern to security@parlytics.ai
Parlytics responds to all security reports within 48 hours

Infrastructure

Enterprise-grade infrastructure for dental DSOs

Hosted on enterprise-grade cloud infrastructure with a 99.9%+ uptime SLA
Automated backups with tested restore procedures
Zero-downtime deployments
US-based infrastructure only

Penetration Testing

Independent security review

Internal security audits conducted regularly
External penetration test planned for Q4 2026 ahead of enterprise tier launch
Vulnerability disclosure program active (security@parlytics.ai)

Security FAQ

Security questions dental groups ask before signing.

Enterprise & DSO Security

Have specific security requirements? Let's talk.

Whether you need a signed BAA, a vendor security questionnaire completed, or a walkthrough of our access controls — our team is ready to help your dental group get to yes.

Contact our team →