Trust & Security

Avalora’s role is to support the med-spa front desk. Your clinic decides the approved information, communication boundaries, and handoff process for its workflow.

Clinic control and human judgment

Clinic-approved FAQs and escalation rules should be agreed before implementation. Avalora does not provide medical advice, diagnose, recommend treatment, determine eligibility, or replace clinical judgment.

Review before launch

Use the fit call to identify what must be confirmed for your clinic. Request the relevant documentation before proceeding with patient-data workflows.

• What information is collected and where it is routed
• Who can access recordings, transcripts, and summaries, if used
• Consent, recording, retention, and deletion requirements
• Required vendor documentation and agreements, including BAA coverage where applicable
• When a request must reach a human and how staff receives it

Claims and operating evidence

The product demo and illustrated workflow cards are examples. They are not customer results, testimonials, or proof of a completed clinic deployment. This page does not claim HIPAA compliance or SOC 2 certification, and it does not establish vendor coverage or a data retention policy.

For workflow-specific security questions, contact burhan@theavalora.com.