Secure by design
HIPAA compliant, encrypted in transit and at rest, zero AI retention. A BAA comes with every account, including the trial.
Here's how we protect client data.
HIPAA Compliance
Auralink Pro is HIPAA compliant. A Business Associate Agreement comes with every account, including the free trial, and its full text is public.
View BAASecure Infrastructure
All data is hosted in the US on Aptible's SOC 2 Infrastructure, built for HIPAA workloads, with daily backups copied across regions.
Aptible SecurityEncrypted in Transit and at Rest
TLS 1.2+ protects data in transit and AES-256 protects it at rest. Each clinician's practice data is isolated from every other account.
Access Controls
Two-factor authentication is required on every professional account. Auralink staff can't open session content without explicit approval, and every access is logged.
Audit Logging
Every access to client data is written to an append-only audit log.
Penetration Testing
Astra Security runs an annual penetration test and monthly vulnerability scans. The current results are public.
View resultsAI Without Memory
Ava runs on Anthropic's models under a zero data retention agreement. Anthropic doesn't store session content or use it for training.
Private by design
Privacy you can see in the product
Your context notes and Clinical Findings stay on your side. Clients speak freely to Ava, and you receive what they mean.
Your context stays with you
The background you give Ava before a session is marked Private and never shown to clients.
Their raw words stay with Ava
Clients speak freely. You receive Ava's synthesis of what they mean, not a transcript of everything they said.
Clinical Findings are for you alone
Five clinical lenses after every session, marked Private and ready to export as a PDF.
Client safety
If a client may be in crisis
In the solo sessions you assign, Ava watches every message for signs that a client may be at risk. You stay the clinician in charge.
Ava checks every message
She looks for suicidal or homicidal thoughts, self-harm, and abuse happening now. Everyday distress, figures of speech, and past events don't set it off.
A confirmed crisis ends the session
Ava gives your client the right resources, such as 988 or 911, and closes the session so they can focus on getting support.
You're alerted, privately
An urgent alert reaches you in Auralink Pro and by email, with no client details in the email. A therapist-only assessment is waiting on the session.
Concerns that aren't confirmed are flagged on the session and assessed when it ends.
AI data
Zero AI data retention. Nothing used for training.
Anthropic, which powers Ava, processes each request and keeps nothing. Your clients' words never train a model.
Ethical AI Use
Auralink Pro is an expansion of therapy, not a replacement for it. Ava remains objective throughout. She offers no advice, guides without leading, and supports structured mediation and reflection.
Ava does not diagnose, treat, or provide therapeutic interventions. The clinical work stays yours.
Penetration tested by Astra
Have questions?
Built for trust
Your BAA is included from day one of the trial.
30 days free · Full access · No credit card required