Healthcare Mode B

Healthcare Mode B is a restricted evaluation and self-hosted posture. It is not a HIPAA certification, a business associate agreement, or a representation that the public RipoDoc service accepts or processes PHI/ePHI.

Mode B is designed to prevent a healthcare evaluation from silently becoming a regulated data-processing deployment. Its baseline is self-hosted/private processing with only synthetic, de-identified, or otherwise authorized non-PHI evaluation data.

• 01

  No PHI/ePHI in the public demo, public hosted authoring path, founding-partner form, ordinary email, public analytics, RipoDoc hosted environment-hosted webhook payloads, or unapproved outbound callback.

• 02

  No “HIPAA compliant,” “HIPAA certified,” “BAA-ready,” or equivalent product claim.

• 03

  No activation of a healthcare provider webhook, connector, or telemetry provider without provider-specific payload/security/subprocessor review.

A future healthcare deployment requires documented risk analysis, role and contract/BAA review, verified infrastructure and subprocessor agreements, access and audit configuration, retention/deletion controls, incident process, security approval, and counsel review. This page is a boundary statement, not legal advice or a substitute for those controls.