Question 1

What is Allyzent?

Accepted Answer

Allyzent is an AI platform that runs healthcare front-office and back-office operations — answering calls, scheduling patients, and working claims end-to-end.

Question 2

Who is Allyzent for?

Accepted Answer

Medical, dental, and specialty practices of any size — with other industries served through Allyzent+.

Question 3

Do we need new software or APIs to use Allyzent?

Accepted Answer

No. Allyzent's patented connector works with your existing systems — no APIs and no custom development required.

Question 4

How do we get started?

Accepted Answer

Book a demo, or simply call our AI agent — it answers instantly and can walk you through everything Allyzent does.

Question 5

Is Allyzent HIPAA compliant?

Accepted Answer

Yes. Every Allyzent employee is HIPAA certified, and the platform is built with HIPAA compliance as a core design requirement.

Question 6

Does Allyzent store PHI, and if so, where and how long?

Accepted Answer

Allyzent stores PHI in call transcripts and recordings, hosted in its secure AWS environment.

Question 7

Do your AI/voice models train on customer or patient data?

Accepted Answer

No. Allyzent does not use customer or patient data to train any AI or voice models; data is used only to deliver the service to the practice that owns it.

Question 8

What happens to call recordings and transcripts, and can a practice request deletion?

Accepted Answer

Call recordings and transcripts are accessible only to authorized staff at the practice they belong to, and a practice may request deletion of its recordings and transcripts at any time.

Question 9

Does Allyzent have BAAs in place?

Accepted Answer

Yes, with Deepgram, OpenAI, and AWS, alongside Twilio. No PHI passes through any vendor without a signed BAA.

Question 10

Can you provide a list of all sub-processors that touch PHI?

Accepted Answer

Yes. Allyzent maintains a current list of sub-processors with signed BAAs and provides it to practices on request.

Question 11

Does Allyzent sign a BAA directly with our practice, or only with upstream vendors?

Accepted Answer

Allyzent signs a BAA directly with each practice, in addition to maintaining its own BAAs with upstream service providers.

Question 12

How secure is Allyzent's platform?

Accepted Answer

Allyzent has completed a SOC 2 Type II audit along with Level 1 and Level 2 penetration testing engagements.

Question 13

How often is Allyzent's platform tested for vulnerabilities?

Accepted Answer

Allyzent undergoes penetration testing on a monthly basis as part of its ongoing security program.

Question 14

Has Allyzent had a cloud security audit?

Accepted Answer

Allyzent's cloud infrastructure is continuously monitored against CIS and AWS Foundations benchmarks using an automated compliance platform, with findings tracked and remediated on an ongoing basis.

Question 15

Is Allyzent SOC 2 compliant?

Accepted Answer

Yes. Allyzent has completed a SOC 2 Type II audit, and its security controls are continuously monitored through an automated compliance platform.

Question 16

Is Allyzent working toward ISO 27001?

Accepted Answer

Yes. Allyzent's Information Security Policy is built around ISO 27001:2022-aligned controls.

Question 17

Do you have a formal Information Security Policy / ISMS?

Accepted Answer

Yes. Allyzent maintains a formal Information Security Policy and management system covering access control, encryption, incident management, vendor risk, and business continuity.

Question 18

Is data encrypted in transit and at rest?

Accepted Answer

Yes. Data is encrypted both in transit and at rest.

Question 19

Do you support role-based access control / least-privilege access to PHI?

Accepted Answer

Yes. Access to PHI is restricted by role, and staff are granted only the access required for their responsibilities.

Question 20

Where is data hosted?

Accepted Answer

Allyzent's infrastructure is hosted on Amazon Web Services (AWS).

Question 21

What is Allyzent's process if a security incident or breach occurs?

Accepted Answer

Allyzent follows a documented incident management process to identify, contain, and report security incidents promptly, including notification to affected practices as required.

Question 22

Are Allyzent employees trained on HIPAA and security?

Accepted Answer

Yes. Allyzent employees complete HIPAA certification and security awareness training as a condition of their role.

Question 23

What is Allyzent's business continuity plan for voice agent availability?

Accepted Answer

Allyzent maintains business continuity and disaster recovery procedures designed to keep voice agent services available during unexpected disruptions.