HIPAA-Ready Pilot · SOC 2 Aligned

A phone-line that doesn't sleep —
and doesn't leak PHI.

Axiom's dental pilot runs your 24/7 call handling on infrastructure that meets HIPAA + SOC 2 baselines from day one. BAA on request. PHI never leaves the compliance boundary. Patients get a bilingual agent that books, confirms, and recalls into your PMS — without skipping identity verification before any clinical handoff.

Built around HIPAA Security Rule §164.312 (technical safeguards), §164.316 (documentation), and SOC 2 Trust Services Criteria CC6, CC7. Pilot acceptance is two signed locations minimum, one PMS integration, and a BAA prior to first caller.

Pilot Operating Profile
Coverage
24 / 7
Languages
EN + ES
PHI Handling
BAA + Audit
Identity Check
Before Handoff
Recall Loop
6-Mo Auto
Transcript Retention
Practice-Only
Compliance you can hand the lawyer

HIPAA and SOC 2, written for the way dental actually runs.

Most AI voice vendors aren't ready for healthcare. Axiom is — by design, not by retrofit. Below is exactly how the pilot maps to the controls your compliance officer will ask about on the first call.

HIPAA
Patient data stays in the room.
  • BAA provided on request before first caller goes live.
  • PHI is never logged to Axiom-retained call transcripts; transcripts live in the practice's own retention layer.
  • Signed identity verification (DOB + last-visit match) required before any clinical handoff back to your team.
  • No off-platform PHI transfers — booking, recall, and insurance verification all flow back into your PMS.
SOC 2
Operationally boring, by design.
  • Annually-audited controls across the Common Criteria (CC) series — access, change mgmt, monitoring.
  • Call audio encrypted in transit (TLS 1.3) and at rest in the practice's chosen tenant; Axiom holds no residual copy.
  • Role-scoped access — no Axiom operator listens to PHI without a documented, ticket-anchored reason.
  • Audit log retention aligned to your state's medical-records retention floor (default 7 years).
Patient experience
A receptionist that scales to every call.
  • Bilingual EN/ES — switches the moment the caller does, no menu prompt.
  • Books, confirms, reschedules, and runs 6-month recall into your real PMS calendar.
  • Insurance verification call-outs are handed off to a human queue, never auto-resolved on the agent.
  • After-hours coverage never escalates a callback to voicemail — every caller leaves with a confirmation number.
Pilot scope — included

What we ship in the 90-day pilot.

01
Up to 3 practice locations
Single PMS tenant, multi-location routing. Additional locations onboard after pilot if results meet the SLA agreed at kickoff.
02
1 PMS / EHR integration
Dentrix, Eaglesoft, Open Dental, Curve Dental, Carestack, AbelSoft, or an HL7/FHIR custom build. Pick the one that runs your front desk today.
03
BAA + SOC 2 documentation
Executed BAA, SOC 2 Type II report (under NDA), and the technical control matrix your compliance officer will reference during vendor review.
04
Pilot SLA + install timeline
Answer time, booking accuracy, and identity-verification miss-rate SLAs committed in writing. Typical install: 2 weeks from BAA counter-sign to first live caller.
Pilot intake

Request pilot intake.

Two-week scoping call after intake. We confirm PMS compatibility, BAA scope, and your recall cadence before any contractual signature — so you see whether the pilot will work before you commit.

We only use the contact email to schedule the scoping call. No marketing list, no newsletter, no resale. Your inquiry routes to axiom@polsia.app within minutes.

Two ways to start

Skip the form — email us directly.

If your compliance officer wants the BAA draft before your team fills in a form, send a one-line email and we'll route the documentation the same day. Pre-sales questions, security questionnaires, and references from existing dental operators all go to the same inbox.

Email axiom@polsia.app Request the BAA + SOC 2 packet

Direct mail, no funnel. PHI-handling questions welcome.