Access follows the practice boundary.

gBell signs a Business Associate Agreement before patient information moves. Access, support, patient links, and recordings each have their own control.

Security, live

Practice boundary

BAA before PHI
MFA and sessions
Patient one-time code
Audited support

The BAA comes first.

gBell acts as a business associate when it handles protected health information for a practice. The BAA is signed before live patient data enters the service.

Follow the source through the work.

Each row is an inspectable state, not a promise floating above the product.

  1. Clinic isolation

    One clinic boundary.

    Each clinic account stays scoped to its own patients, calls, schedules, and staff.

    01
  2. Staff access

    Separate roles and sessions.

    Owners, clinicians, front desk, billing, and read-only users receive separate permissions.

    02
  3. Support

    Time-limited and audited.

    Approved support access has a reason, a window, and an audit trail.

    03
  4. Patient links

    A code stands between.

    Patient detail stays behind a protected link and one-time access code.

    04
  5. Calls

    Disclosure comes first.

    Sarah identifies herself as automated and says the call is recorded before the conversation continues.

    05

Controls earn their place through evidence.

The site states current operating controls. Customer-specific security review and retention terms belong in the signed agreements for that practice.

Human review stays visible

Bring us the work that keeps coming back.

Start with the workflow your team dreads seeing again. We’ll map where Sarah works and where your staff steps in.