Summary 🧭: Automation you can trust: Tabflows drafts, your team reviews, and PHI is handled under Tabflows' obligations as a HIPAA Business Associate.
A note for non-human readers...
A note for non-human readers...
Automation can move work faster, but “faster” does not make privacy obligations disappear. This article explains Tabflows’ approach to HIPAA-compliant automation. Keep the product’s documented safeguards separate from the clinic’s own policies and responsibilities.
Tabflows automates clinic work that touches PHI. That only works if the safeguards come first. Here is the program the automation runs inside.
Tabflows is designed to support HIPAA-compliant use, and your organization remains responsible for its own HIPAA obligations and for how your team uses Tabflows.
Tabflows operates as a Business Associate
When Tabflows handles PHI on your organization's behalf, it operates as a Business Associate under a BAA that applies automatically to covered entities using the service. See Get a Business Associate Agreement (BAA) with Tabflows.
Administrative and technical safeguards
Tabflows maintains administrative and technical safeguards for the PHI it processes. Data is encrypted in transit and at rest, production access is restricted to a small group of authorized personnel, and each clinic's data is partitioned from every other customer's.
Core PHI vendors are under signed BAAs
Tabflows maintains signed Business Associate Agreements with the vendors in its core PHI-processing stack, including the AI providers behind Sidekick and Magic Buttons.
A current subprocessor list is available on request from [email protected].
Internal risk assessments
Tabflows performs internal risk assessments of the systems and workflows that handle PHI, and updates its safeguards based on what those assessments find.
Breach notification
If a breach of unsecured PHI affects your organization, Tabflows notifies you in accordance with the BAA and HIPAA breach notification requirements.
What this means for Sidekick and Magic Buttons
Sidekick (the AI assistant) and Magic Buttons (the buttons inside your EMR) are not exceptions to this program — they run inside it. Same encryption, same partitioning, same BAA coverage.
And you stay in the loop: Tabflows drafts, and a person on your team reviews before anything goes to a patient.
Get support 💬
Need help or have a question? Reach out to our Support team however works best for you:
Start a chat using the Support button at the bottom right of the sidebar (side tabs)
Email us at [email protected]