Business associate agreement
Signed before any Kairo user is given access.
Security & privacy
Security and privacy, designed for healthcare.
Kairo’s operating model is designed to work within the systems, permissions, and security expectations of the healthcare organizations we support.
Discuss your security reviewOur model
Work in your systems. Keep data in your environment.
Kairo staff work inside your EHR, phone and referral systems through secure virtual desktops. Notes, call logs, recordings and records requests stay in your systems, so patient data stays in your environment.
The exact permissions, workflows, and escalation paths are defined with each client before work begins.
Control areas
What every engagement includes.
These are operating controls, not a substitute for a client-specific security review, BAA, or contract.
Access you control
Your IT team creates, limits and removes every Kairo account.
Minimum necessary access
Each role gets only the permissions the agreed workflow needs.
Non-clinical scope
No clinical advice, triage, or diagnosis coding. Billing follows your policies. Clinical questions go to your team.
Review-ready by design
The right review is client-specific. We come prepared for it.
We will work through your security questionnaire, access model, agreement requirements, and approved workflow before live patient work begins.
- Client-defined access and workflow review
- BAA and subcontractor obligations as applicable
- PHI-free business inquiry process