HIPAA compliant · BAA included

Secure by design

HIPAA compliant, encrypted in transit and at rest, zero AI retention. A BAA comes with every account, including the trial.

Here's how we protect client data.

HIPAA Compliance

Auralink Pro is HIPAA compliant. A Business Associate Agreement comes with every account, including the free trial, and its full text is public.

View BAA

Secure Infrastructure

All data is hosted in the US on Aptible's SOC 2 Infrastructure, built for HIPAA workloads, with daily backups copied across regions.

Aptible Security

Encrypted in Transit and at Rest

TLS 1.2+ protects data in transit and AES-⁠256 protects it at rest. Each clinician's practice data is isolated from every other account.

Access Controls

Two-factor authentication is required on every professional account. Auralink staff can't open session content without explicit approval, and every access is logged.

Audit Logging

Every access to client data is written to an append-only audit log.

Penetration Testing

Astra Security runs an annual penetration test and monthly vulnerability scans. The current results are public.

View results

AI Without Memory

Ava runs on Anthropic's models under a zero data retention agreement. Anthropic doesn't store session content or use it for training.

Private by design

Privacy you can see in the product

Your context notes and Clinical Findings stay on your side. Clients speak freely to Ava, and you receive what they mean.

Dr. Fields·Auralink Pro

Your context stays with you

The background you give Ava before a session is marked Private and never shown to clients.

Natalie·Auralink app
Dr. Fields·Auralink Pro

Their raw words stay with Ava

Clients speak freely. You receive Ava's synthesis of what they mean, not a transcript of everything they said.

Dr. Fields·Auralink Pro

Clinical Findings are for you alone

Five clinical lenses after every session, marked Private and ready to export as a PDF.

Client safety

If a client may be in crisis

In the solo sessions you assign, Ava watches every message for signs that a client may be at risk. You stay the clinician in charge.

  • Ava checks every message

    She looks for suicidal or homicidal thoughts, self-harm, and abuse happening now. Everyday distress, figures of speech, and past events don't set it off.

  • A confirmed crisis ends the session

    Ava gives your client the right resources, such as 988 or 911, and closes the session so they can focus on getting support.

  • You're alerted, privately

    An urgent alert reaches you in Auralink Pro and by email, with no client details in the email. A therapist-only assessment is waiting on the session.

Concerns that aren't confirmed are flagged on the session and assessed when it ends.

AI data

Zero AI data retention. Nothing used for training.

Anthropic, which powers Ava, processes each request and keeps nothing. Your clients' words never train a model.

Ethical AI Use

Auralink Pro is an expansion of therapy, not a replacement for it. Ava remains objective throughout. She offers no advice, guides without leading, and supports structured mediation and reflection.

Ava does not diagnose, treat, or provide therapeutic interventions. The clinical work stays yours.

HIPAA Compliant

Penetration tested by Astra

Have questions?

Built for trust

Your BAA is included from day one of the trial.

30 days free · Full access · No credit card required