Skip to content

HIPAA-compliant med spa software you don't have to think about.

Annabelle Health is designed for the way a medical practice has to handle information. Every patient interaction is encrypted and audit-logged, and access is scoped to the people who need it.

How does Annabelle Health protect patient data?

Encryption in transit & at rest

Patient data is encrypted everywhere it lives and everywhere it travels.

Audit logging

Every access and change to a record is logged and reviewable.

Role-based access control

Permissions are scoped by role, so the right eyes see the right records.

Business Associate Agreement

We sign a BAA and handle PHI as a covered entity's partner.

Patient data ownership

Your practice owns its data and can export it any time.

How does Annabelle Health handle PHI?

Honest about what we do, clear about what it means for your practice.

We treat protected health information the way HIPAA requires: least-privilege access, encryption, audit trails, and a signed Business Associate Agreement with every practice. We describe our practices honestly and do not claim certifications we do not yet hold.

For how we handle website and platform data, read the Annabelle Health privacy policy.

Last updated: October 10, 2026.

Have a compliance question?

Book a demo and we'll walk your team through exactly how Annabelle Health protects patient data.

Book a demo
  • A signed BAA with every plan
  • Encryption in transit & at rest