Analytics that pay for your peace of mind

Is SecurePHI actually HIPAA compliant?

SecurePHI is built on the HIPAA Safe Harbor de-identification standard (45 CFR §164.514(b)). We never collect, store, or transmit any of the 18 PHI identifiers. Visitor IPs and User-Agent strings are hashed with a daily-rotating salt before any write occurs — the raw values are discarded immediately. No cookie, no localStorage, no cross-session link.

What is a BAA and do I need one?

A Business Associate Agreement (BAA) is a contract required by HIPAA when a covered entity shares PHI with a vendor. Because SecurePHI never receives PHI in the first place, a BAA is technically optional for the Starter plan. However, most compliance officers require one regardless — so all HIPAA Clinic, Growth, and Enterprise plans include a BAA automatically.

Can I switch plans or cancel at any time?

Yes. Plans are billed monthly and you can upgrade, downgrade, or cancel from your dashboard settings at any time. Cancellation takes effect at the end of the current billing period.

What counts as a page view?

A page view is recorded each time our Ghost Script beacon fires on a page load. SPAs that use client-side routing can call our optional event API to track navigation events. Bot and internal traffic filtering is applied automatically.

What happens if I go over my page view limit?

On the Starter plan, events above the 50,000/month threshold are dropped rather than billed — you'll never see an unexpected overage charge. We'll email you when you're at 80% so you can upgrade before any data is lost.

Do you offer discounts for non-profits or academic medical centers?

Yes — contact us for a custom Enterprise quote. We offer reduced pricing for non-profit health organizations and academic medical centers.