Compliance & ethics

Built for behavioral health.Committed to doing the right thing.

At Clinically AI, compliance isn’t a checkbox. It’s the foundation we build everything on. We serve clinicians, care teams, and communities where privacy, accuracy, and ethical decision-making are essential to care delivery. Your trust. Your data. Your standards, protected.

HIPAA•SOC 2 Type II•Zero Data Retention•FERPA-Aligned•BAAs Available

Security & privacy

HIPAA Compliance

Every part of our platform, from documentation generation to audit reporting, is designed to meet or exceed HIPAA standards. We sign Business Associate Agreements (BAAs) and offer full transparency into our privacy practices.

SOC 2 Type II Certification

We undergo independent third-party audits and hold SOC 2 Type II certification, verifying that our infrastructure, security practices, and internal controls meet rigorous, ongoing compliance requirements.

Zero Data Retention (ZDR)

Audio and text data used to generate clinical documentation is deleted immediately after note creation, unless explicitly retained by the user. You control your data, always.

FERPA Alignment

For school-based and K-12 educational care settings, our data practices align with FERPA standards to protect student confidentiality.

Ethical AI for behavioral health

Clinically AI is not a general-purpose AI with a behavioral health skin. Our models are trained, tuned, and continuously refined to support behavioral health documentation standards and provider workflows. We maintain:

  • Full transparency into how models are trained and updated.
  • Human-in-the-loop review as a standard safeguard. Notes are always editable, reviewable, and never auto-submitted.
  • Evidence-based alignment with ICD-10 standards and regulatory policy requirements.
  • Bias monitoring and feedback loops to minimize hallucinations and inaccurate outputs.
Clinical judgment leads. AI generates; you approve.

Consent, privacy & end-user rights

Clinically AI supports flexible, program-specific approaches to client consent and privacy, including configurable options for audio capture, transcription, and AI-assisted documentation. Providers always operate with full transparency into what is stored, for how long, and where.

Clinical Ethics & Compliance Advisory Board

Our platform evolves through continuous clinician feedback, policy changes, regulatory updates, and guidance from our Clinical Ethics & Compliance Advisory Board, composed of licensed professionals, legal experts, and health informatics specialists.

Questions or concerns?

Providers, administrators, and partners with questions about our compliance policies or ethical practices are welcome to reach out directly.

Book a Demo

Who we answer to

Built here.Answerable to you.

US-based, end to end

Strategy, engineering, and data all stay in the United States. No offshore development and no offshore data residency.

Self-funded

No private equity and no venture backing, which means decisions get made in the provider’s interest rather than on an investor’s timeline.

You own the data and the clock

Transcript only, never audio. You set the retention window, most organizations choose two weeks, and you can wipe everything at any time. Your data never trains a model, ours or anyone else’s.

Certified, and continuing

HIPAA and SOC 2 certified today, working toward ISO 42001 for AI management systems.