We do not sell your data for ads
TalkDoc does not sell personal information or share it for cross-context behavioral advertising. We do not disclose health information to third-party advertisers for targeted ads.
Security
Clear boundaries for sensitive work.
TalkDoc limits who—and what—can enter each workflow. Protection changes with the job. Technology does not erase who is responsible for care. No online service can promise perfect security.
IronEgg · staged rollout
Deployed scope varies by feature and technical environment.
Plain summary
What matters in ordinary language.
Access should match the job
People and systems get access only when their work requires it. Care, billing, support, and AI use different workflows with different controls.
Sealed AI is scoped, not universal
Eligible private patient AI and certain in-visit paths are designed to run inside confidential-computing boundaries. Scheduling, Community, phone workflows, billing, and some clinician tools use separate systems under their own protections—including HIPAA Business Associate Agreements where they apply.
Expert detail · optional
How sealed processing is designed.
IronEgg is TalkDoc’s confidential-computing architecture for eligible AI workflows. Claims apply only where that architecture is enabled—not to every product surface.
Hardware isolation
Eligible workloads are designed to use confidential-computing hardware that isolates protected memory from the surrounding host and ordinary operators.
Attestation evidence
The architecture can produce evidence about the software image running inside an eligible environment. Direct client verification and broader assurance remain staged.
Encrypted envelopes & short-lived keys
Eligible requests and responses are designed to cross the enclave boundary as ciphertext. Identity keys are meant for a running environment and destroyed at shutdown.
Scope note. GPU attestation, direct client verification, OHTTP routing, and independent assurance remain staged work. AI does not independently diagnose, prescribe, or replace a licensed clinician.
AI boundariesLean claims
Only what we can stand behind.
HIPAA-aware operations
Clinical services are delivered by licensed providers. TalkDoc supports those relationships with contracts and safeguards appropriate to each role—including Business Associate terms where HIPAA applies.
What we do not claim here
This page is not a SOC 2 report, penetration-test certificate, or third-party audit badge. When independent assurance is published for a specific scope, we will say so clearly.
Your account
Security is shared.
- Use a unique password and keep sign-in information private.
- Sign out on shared devices and keep device software current.
- Tell us promptly about unfamiliar activity or a suspicious message.