Healthcare team collaboration, designed with HIPAA's safeguards in mind

One workspace for the whole care team

Clinical work does not divide neatly into a chat app, a video app and a task tracker, so it stops being three products here. Conversations, meetings, task boards and the patient queue live in one workspace, and a Space keeps a team's work to that team — its board is visible to its members and to nobody else in the organisation.

• Channels and direct messages, with mentions, files and threaded replies
• Video meetings started from any conversation, or scheduled ahead
• Task boards per Space, with the stages your clinic actually uses
• A shared whiteboard beside the cards that track the work

Built for PHI, not adapted for it

Handling patient data was the starting requirement, not a compliance module added later. Content tables carry soft-delete and retention columns so a record can be removed and stay removed; the audit log is append-only, so what happened cannot be quietly rewritten; and AI features are gated per organisation rather than switched on for everyone by default.

• Append-only audit log covering access, changes and administrative actions
• Soft-delete plus retention windows on the tables that hold content
• Per-organisation control over whether AI ever sees clinical data
• Every request re-checks the caller's organisation and membership

The core of it runs on servers we operate

The database, sign-in, real-time messaging, the video server and live-caption speech-to-text run on servers we operate rather than on somebody else's platform — so when our server is captioning a call, the audio is transcribed there rather than posted to a transcription API. The providers we do use are named on our privacy page: files and recordings are kept in private Cloudflare R2 storage, Cloudflare serves the website and carries the app's traffic to our servers, and AI features call Anthropic only if your organisation switches them on.

• Self-hosted PostgreSQL, not a managed database on a shared platform
• Self-hosted video server, so calls are not relayed through a video vendor
• Server captions transcribed on our own servers — that audio goes no further
• Files and recordings in private Cloudflare R2 storage, reached only by time-limited links

Healthcare mode, when a conversation cannot be recorded

Some consultations should leave nothing behind at all. Healthcare mode is end-to-end encrypted — the encryption key is generated in the browser and never reaches our servers — and it persists nothing: no recording, no transcript, no summary. Recording and broadcasting are not discouraged in that mode, they are refused outright by the server.

• Keys generated in the browser; the API never receives one
• Recording, broadcasting and captions all refused, not merely hidden
• Nothing written to disk: no transcript, no summary, no recording
• Cannot be switched on mid-meeting, so the guarantee covers the whole call

Common questions

Is WorkStation HIPAA compliant?

No software is HIPAA compliant on its own. Compliance depends on your organisation's own policies and on a signed business associate agreement with every vendor that handles your patients' data — and we do not offer a BAA yet (see the next question). What WorkStation brings to your HIPAA program is the technical side: Healthcare-mode meetings are end-to-end encrypted with a key that never reaches our servers, and keep no recording or transcript; everything else is encrypted in transit; an append-only audit log records access and administrative actions; content carries retention and deletion controls; and every request re-checks the caller's organisation. Talk to us before you put patient data into it.

Will you sign a business associate agreement?

Not yet. A BAA we sign has to be backed by matching agreements with the providers that host and store your data, and those are not in place today — so we will not offer one we could not honour. If your organisation needs a BAA, contact us with your requirements and timeline and we will tell you plainly where it stands.

Where is our data stored?

Messages, accounts and meeting records are in our own database, on servers we operate; calls run through our own video server. Files and recordings are stored in a private Cloudflare R2 bucket, reachable only through time-limited links. Our privacy page names every provider involved, and we can tell you exactly where each category of data lives.

Can we stop meetings being recorded?

Yes. Healthcare mode refuses recording entirely, at the server rather than by hiding a button. In every other mode, recording is announced to everyone in the room the moment it starts — a visible badge and a banner, driven by the meeting server rather than by the recorder's own client.

Does the AI assistant see patient data?

Only if your organisation explicitly enables it. AI is gated per organisation by a single setting, and every AI run is written to the audit log with the model and the outcome — never the prompt and never the output.