1. HIPAA Compliance

Renewal Behavioral Health Center operates in full compliance with the Health Insurance Portability and Accountability Act (HIPAA). All protected health information (PHI) is handled according to federal law. A Business Associate Agreement (BAA) is in place with all technology vendors including Microsoft Azure and Microsoft Dragon Copilot.

2. Data We Collect

We collect clinical information necessary for patient care including demographics, diagnoses, treatment notes, assessments, and medication history. Voice recordings made through Dragon Copilot are processed by Microsoft and are not retained after transcription.

3. Dragon Copilot Audio Processing

When Dragon Copilot ambient recording is used, audio is transmitted to Microsoft Azure infrastructure in the United States and processed to generate clinical documentation. Audio is not stored after processing. The resulting structured notes become part of the patient's medical record.

4. Data Security

Data is encrypted in transit (TLS 1.3) and at rest (AES-256). Access is restricted by role and logged in the audit trail. Sessions expire after 8 hours of inactivity.

5. Contact

Privacy Officer: privacy@renewal-bhc.com  |  Technology Partner: SAI Systems Technology — saisystems.com/tech