Security & Compliance

Last updated: June 21, 2026

1. Our approach to security

We take the security of your business and caller information seriously. As a new and growing service, here's where we currently stand — and what we're working toward.

2. Current practices

• Data is stored with reputable third-party infrastructure providers (e.g., your AI platform and hosting provider's own security practices apply)
• Access to customer data is limited to what's needed to operate and support your account
• We do not sell or share caller data for advertising

3. HIPAA

NeverMiss AI is not currently HIPAA-certified or operating under a Business Associate Agreement (BAA). Medspas should avoid having the AI receptionist collect or discuss Protected Health Information (PHI) — such as specific diagnoses, treatment history, or medical records — until formal HIPAA compliance measures (BAAs with all subprocessors, encryption standards, audit logging, etc.) are in place. The Service is designed for scheduling, general service questions, and FAQs, not for handling clinical health information.

If HIPAA compliance becomes available, this page will be updated accordingly with verifiable details.

4. Reporting a security concern

If you discover a security vulnerability or have a concern, please email kkgmedia1@gmail.com and we'll respond promptly.