Security & Compliance
TensorLinks protects patient information across voice, SMS, web chat, and practice management integrations using administrative, technical, and operational safeguards.
Last reviewed September 2026 · info@tensorlinks.com
Six controls — each designed for healthcare environments.
Patient information is encrypted in transit (TLS 1.3) and at rest (AES-256). Applies to call recordings, messages, and all PMS data.
Team members receive access only for their assigned responsibilities. Permissions are reviewed regularly and revoked immediately on offboarding.
Access, changes, and system events are recorded in tamper-evident audit logs. Available for compliance review upon request.
TensorLinks requests only the information required to complete an approved workflow — scheduling, recall, and communication tasks only.
Practice management connections use approved authentication (OAuth 2.0, API keys) with restricted read/write permissions scoped to scheduling.
Security events are monitored continuously. Confirmed incidents trigger our response procedure with Covered Entity notification within 5 business days.
Before TensorLinks processes Protected Health Information, eligible healthcare customers execute a Business Associate Agreement covering permitted use, safeguards, breach notification timelines, and data handling responsibilities. The BAA is executed at signup — before any PHI flows.
TensorLinks Inc. — Business Associate Agreement
This Agreement is entered into as of the date of signing between the Covered Entity identified in the associated Services Agreement and TensorLinks Inc., Austin, Texas (“Business Associate”).
Permitted use: Business Associate may use or disclose PHI only as required to fulfil obligations under the Services Agreement, applying the minimum-necessary standard at all times.
Safeguards: Business Associate implements administrative, physical, and technical safeguards (TLS 1.3 in transit · AES-256 at rest · RBAC · MFA · audit logging) in compliance with the HIPAA Security Rule.
Breach notification: Written notice to Covered Entity within five (5) business days of awareness of any unauthorized access, use, or disclosure of PHI.
Subcontractors: Each subcontractor with PHI access is bound by an agreement at least as restrictive as this BAA.
Termination: Upon termination, all PHI is returned or securely destroyed. Where infeasible, protections continue indefinitely.
TensorLinks Inc. · Austin, Texas · Last reviewed September 2026 · privacy@tensorlinks.com
TensorLinks Inc. — Business Associate Agreement
This Agreement is entered into as of the date of signing between the Covered Entity identified in the associated Services Agreement and TensorLinks Inc., Austin, Texas (“Business Associate”).
Permitted use: Business Associate may use or disclose PHI only as required to fulfil obligations under the Services Agreement, applying the minimum-necessary standard at all times.
Safeguards: Business Associate implements administrative, physical, and technical safeguards (TLS 1.3 in transit · AES-256 at rest · RBAC · MFA · audit logging) in compliance with the HIPAA Security Rule.
Breach notification: Written notice to Covered Entity within five (5) business days of awareness of any unauthorized access, use, or disclosure of PHI.
Subcontractors: Each subcontractor with PHI access is bound by an agreement at least as restrictive as this BAA.
Termination: Upon termination, all PHI is returned or securely destroyed. Where infeasible, protections continue indefinitely.
TensorLinks Inc. · Austin, Texas · Last reviewed September 2026 · privacy@tensorlinks.com
Summary only. Your executed BAA will include complete legal terms. Contact privacy@tensorlinks.com for your signed copy.
Four categories of protection, applied at the platform level.
HIPAA compliance is a shared model. Here is how responsibilities are split.
General summary only. Have your compliance or legal team review before using for formal risk assessments.
Access our current security documentation, compliance status, policies, and subprocessor information — all in one place.
