SECURITY & MEMBER CHOICE

Care needs trust.
Build on a secure foundation.

RAMROK’s HIPAA-compliant health-data pipeline combines business associate agreements, encrypted records and controlled access with member choice.

01 / AGREEMENTS & PROCESSING

A BAA-backed health-data pipeline.

Health information is processed under applicable business associate agreements and the service configurations that support those agreements. We review the intended use and applicable agreements with your organization during onboarding.

02 / ACCESS

The right access for each role.

Staff and administrative workspaces use multi-factor verification. Organization membership, assigned care-team access and member permissions determine which records are available. Managing a brand does not automatically grant access to health records.

03 / MEMBER CHOICE

Sharing stays in the member’s hands.

Private account sync, connected-device access, practice sharing and Coach permissions are separate choices. Members choose the categories they share and can revoke access through the available account controls.

04 / DATA PROTECTION

Protection across the service.

Encrypted records, protected service access and security events support accountability. Operational diagnostics exclude health content, questions, responses, credentials and invitation links.

AI follows the same access boundaries.

Coach uses relevant, authorized context through RAMROK’s backend. Members can withdraw Coach sharing independently. AI output supports exploration and discussion; it does not replace professional judgment or become a diagnosis.

Read the AI privacy details ↗

CLEAR EXPECTATIONS

Know what you’re sharing.

Bring your organization’s security requirements into the onboarding conversation.

Does connecting a device share everything with our practice?

No. Device access, private sync and care-team sharing are separate permissions. A record must be available through the supported connection and authorized for the staff member viewing it.

Do all plans have the same required safeguards?

Yes. Required security, consent, access controls and basic export are part of both Starter and Growth. These protections are not an upgrade feature.

Can we review the applicable agreements?

Yes. Contact our team to review the agreements and processing scope that apply to your organization’s intended use before onboarding.

Where can members find privacy information?

The privacy notice explains account information, record sharing, AI processing, diagnostics and account choices. The support page provides a route for account and privacy questions.

Example branded portal with fictional demonstration records
Member app showing fictional health records

YOUR TEAM. YOUR MEMBERS. YOUR BRAND.

Bring your practice
closer to everyday health.

A daily companion for members. A clearer view for staff. An experience that belongs to your practice.

Request a RAMROK demo

A closer look

Actual product interface with fictional demonstration records.