Skip to content

Built to be trusted with your name.

Your website is how patients find you. Here is exactly how we look after it — in plain language, without badges we haven’t earned.

Your domain and content stay yours

Your domain stays registered to your practice, and your content (text, photos, bios, logos and articles) belongs to you. If you leave, we export all of it and help point your domain to your new provider. No one can hold your website address hostage.

No patient health information

The sites we build don’t collect patient health information. Online booking stays with your HIPAA-compliant scheduling vendor. Our request form reminds your team not to include patient details.

A person reviews every change

Only a member of our team can publish to your live site, and only after you approve the preview. This is enforced in our tooling and in the site repository’s branch protection.

AI with least privilege

When AI helps implement a change, it works in an isolated sandbox with access to your site’s repository only. It gets no deployment credentials, no payment keys and no other practice’s data, and it can’t merge or deploy.

Requests treated as untrusted input

Text in a request or an uploaded file can’t instruct our tools to do anything outside the request. Every agent run is logged for review.

No passwords by email

Your team signs in with single-use email links. During onboarding you add us as a user to your domain and Google accounts instead of sharing passwords.

Accessibility, tested

Every site is built and tested to WCAG 2.1 AA, with automated checks on every change and a manual keyboard and screen-reader pass at launch. We keep the results.

Every change is logged and reversible

Requests, approvals and published versions are recorded with who did what and when. Any published change can be rolled back.

Where your data lives

Sites are served from Cloudflare’s network. Dashboard data (account details, requests, uploaded files) is stored with Cloudflare. Payments are handled by Stripe; we never see or store card numbers. Transactional email is sent through a dedicated email provider. We don’t sell data or use advertising trackers, and site analytics are cookieless.

We don’t currently hold third-party security certifications. If your practice needs a specific questionnaire completed, ask us.

See your practice’s site, rebuilt.

Send us your website address. We’ll build a private preview from your practice’s public details. No cost and no commitment.