Security

Access follows the practice boundary.

gBell signs a Business Associate Agreement before patient information moves. Access, support, patient links, and recordings each have their own control.

The access boundaryOne clinic account
BUSINESS ASSOCIATE AGREEMENTClinic accountSCOPED TO ONE PRACTICEANOTHER CLINICSTAFF ROLESOwnerClinicianFront deskBillingRead-onlyCallerPHONEDisclosure firstAUTOMATED, RECORDEDPatientMESSAGE LINKOne-time codeBEFORE ANY DETAILStaffINVITATIONMFAROLE CHANGE ENDS SESSIONSgBell supportAPPROVEDTime-limitedEVERY ACCESS AUDITEDCallerPHONEDisclosureRECORDEDPatientLINKOne-time codeFIRSTStaffINVITEMFASESSIONSSupportAPPROVEDTime-limitedAUDITEDBAA, SIGNED FIRSTClinic accountSCOPED TO ONE PRACTICEANOTHER CLINICNO PATHSTAFF ROLESOwnerClinicianFront deskBillingRead-only
The boundary

Select any line or gate to read the control behind it.

Every control drawn here is described on this page. Nothing else is implied.

The BAA comes first.

gBell acts as a business associate when it handles protected health information for a practice. The BAA is signed before live patient data enters the service.

  1. First

    The BAA is signed

  2. Then

    Live patient data enters

Each way in has its own control.

The five access controls on the boundary drawing, in the words we hold ourselves to.

  1. 01

    Clinic isolation

    Every clinic account stays scoped to its own patients, calls, schedules, and staff.

    The clinic boundary
  2. 02

    Staff roles

    Owners, clinicians, front desk, billing, and read-only users receive separate permissions.

    Inside the clinic
  3. 03

    MFA and sessions

    Invitations require MFA. Role changes and disables end old sessions.

    Staff entry
  4. 04

    Support

    Approved support access is time-limited and audited.

    Support entry
  5. 05

    Patient links

    A one-time code stands between the message and patient detail.

    Patient entry

The caller hears the disclosure first.

gBell tells the caller they are speaking with an automated assistant and that the call is recorded. A caller who declines recording can leave a message or move to a person under the practice's rules.

Line 1, first words0:00

“You've reached the practice's automated assistant. This call is recorded.”

  1. Caller continues

    gBell handles the request.

  2. Caller declines recording

    Leave a message, or move to a person under the practice's rules.

Evidence boundary

This page names only controls with current evidence. If a control isn't listed here, we don't claim it.