Security
Access follows the practice boundary.
gBell signs a Business Associate Agreement before patient information moves. Access, support, patient links, and recordings each have their own control.
Select any line or gate to read the control behind it.
The BAA comes first.
gBell acts as a business associate when it handles protected health information for a practice. The BAA is signed before live patient data enters the service.
- First
The BAA is signed
- Then
Live patient data enters
Each way in has its own control.
The five access controls on the boundary drawing, in the words we hold ourselves to.
- 01
Clinic isolation
Every clinic account stays scoped to its own patients, calls, schedules, and staff.
The clinic boundary - 02
Staff roles
Owners, clinicians, front desk, billing, and read-only users receive separate permissions.
Inside the clinic - 03
MFA and sessions
Invitations require MFA. Role changes and disables end old sessions.
Staff entry - 04
Support
Approved support access is time-limited and audited.
Support entry - 05
Patient links
A one-time code stands between the message and patient detail.
Patient entry
The caller hears the disclosure first.
gBell tells the caller they are speaking with an automated assistant and that the call is recorded. A caller who declines recording can leave a message or move to a person under the practice's rules.
“You've reached the practice's automated assistant. This call is recorded.”
- Caller continues
gBell handles the request.
- Caller declines recording
Leave a message, or move to a person under the practice's rules.
This page names only controls with current evidence. If a control isn't listed here, we don't claim it.