SOC 2 Type II
In ProgressIn Progress — Expected Q1 2026
Independent audit of security, availability, processing integrity, confidentiality, and privacy controls.
Trust Centre
Trust & Security at the Core
Clinic Assist is built on the enterprise-grade security infrastructure of CX Assist, ensuring your clinic's patient communications are protected by robust, globally-recognised standards — including GDPR, HIPAA, SOC 2, and ISO 27001:2022.
GDPR Compliant
HIPAA Compliant
SOC 2 in Progress
ISO 27001:2022 in Progress
Powered by
TRUSTED BY HEALTHCARE LEADERS
Security
Clinic Assist is powered by CX Assist — a trusted partner in secure healthcare communications. Through this partnership, Clinic Assist inherits an unwavering commitment to protecting your data and ensuring privacy across all voice and data interactions.
The underlying security posture is underpinned by enterprise-grade AWS infrastructure, industry-leading best practices, and adherence to globally-recognised security and privacy frameworks. CX Assist goes beyond compliance to proactively identify and mitigate risks, continuously enhancing security measures — so Clinic Assist can focus on delivering exceptional patient experiences, without compromise.
This Trust Center provides a detailed overview of the data security and privacy measures that power Clinic Assist, including risk management, best practices, and continuous improvement in AI-powered healthcare communications.
Compliance Standards
The safeguarding of your patients' data is taken seriously. Through CX Assist's compliance programme, Clinic Assist works to meet a variety of standards to protect sensitive health information and maintain trust with clinics and patients alike.
ISO 27001
In ProgressIn Progress — Expected Q2 2026
International standard for information security management systems, ensuring a systematic approach to managing sensitive information.
GDPR
CompliantFull compliance with the European General Data Protection Regulation for all patient data processing and storage.
HIPAA
CompliantHealthcare Insurance Portability and Accountability Act compliance for protected health information in healthcare communications.
Security Controls
Continuously monitored across 85+ security controls — delivered through CX Assist's platform
Voice & Communication Security
- End-to-end call encryption (AES-256)
- Secure VoIP transmission protocols
- Real-time call monitoring and recording
- Voice data anonymisation capabilities
View 8 more controls
Data Protection
- Regional data storage via AWS RDS
- Automated data backup and recovery
- Data retention policy enforcement
- Patient data segregation
View 11 more controls
AI & Machine Learning Security
- AI model access controls
- Training data protection
- Bias detection and mitigation
- Model versioning and rollback
View 4 more controls
Infrastructure Security
- AWS multi-region deployment
- Network segmentation and firewalls
- DDoS protection via CloudFront
- Intrusion detection systems
View 14 more controls
Access Management
- Multi-factor authentication (AWS Cognito)
- Role-based access controls
- Regular access reviews
- Privileged account monitoring
View 6 more controls
Compliance & Governance
- Regular security assessments
- Incident response procedures
- Vendor risk management
- Employee security training
View 18 more controls
Infrastructure & Technology
AWS Foundation
Clinic Assist runs on Amazon Web Services infrastructure managed by CX Assist, with enterprise-grade security at every layer:
- AWS RDS for secure, regional database storage
- AWS Cognito for identity and access management
- CloudFront CDN for secure, fast content delivery
- GuardDuty for intelligent threat detection
- Route 53 with built-in DDoS protection
Telecommunications Security
Industry-hardened voice infrastructure designed for secure healthcare communications.
- Custom Asterisk framework with security hardening
- Encrypted SIP communications
- Secure call routing and load balancing
- Real-time call quality monitoring
AI Security
Responsible AI deployment with robust safeguards and governance throughout every layer.
- Secure AI model deployment and management
- Data anonymisation for AI training
- Continuous model monitoring and validation
- Ethical AI governance framework
Resources
12 Policies
Documentation & Policies
- Information Security Policy
- Data Protection and Privacy Policy
- Incident Response Policy
- AI Ethics and Governance Policy
- + 8 more documentation & policies
8 Certifications
Certifications
- AWS Security Best Practices
- Telecommunications Security Standards
- AI Safety Guidelines
- Healthcare Data Protection
- + 4 more certifications
4 Technical Documents
Technical Documents
- Security Architecture Overview
- Data Flow and Processing Guide
- Encryption Standards Documentation
- Business Continuity Plan
Trusted By
130+ healthcare businesses — including clinics, chiropractic practices, wellness centres, and specialist providers — trust Clinic Assist (powered by CX Assist) with their most sensitive patient communications.
“They cost me a fraction of what it would cost to pay a full-time receptionist... Just doesn't make any financial sense not to use them.”
James Shorthouse
Elms Chiropractic
“Kate has restored my faith in VA companies and continues to over-deliver at every opportunity! The feedback from patients is very positive too!”
Healthcare Practice Owner
Clinic Owner
FAQ
Ready to Secure Your Clinic\u2019s Communications?
Join 130+ Healthcare Businesses Trusting Clinic Assist
Experience enterprise-grade security — powered by CX Assist — with AI-driven voice solutions built specifically for healthcare. Book a free consultation to see how Clinic Assist can protect your patient interactions.
All consultations are confidential and covered by our strict privacy policies.
