Does mosAIQ sign a Business Associate Agreement (BAA)?+
Yes — the BAA is signed before we access any patient system, EHR, or PHI. The BAA covers all agents, integrations, and data flows. No access is granted until the BAA is fully executed. You receive a countersigned copy on day 1.
Does the AI see patient names, DOBs, or insurance IDs?+
No. PHI is de-identified and tokenized before any data enters the AI processing layer. The AI model sees only structured clinical tokens — never a patient name, date of birth, Social Security number, or insurance identifier. This is enforced at the architecture level, not by policy alone.
How does mosAIQ handle TCPA for SMS and voice outreach?+
Every automated SMS and voice communication follows TCPA requirements. Written consent is captured from each patient and archived in your records before any automated outreach begins. Opt-out is honored within one message. Time-of-day restrictions are enforced automatically based on the patient's state of residence. Do-not-call registry is checked before any voice outreach.
What happens if a patient opts out of automated messages?+
Opt-out is honored immediately — within the same message thread — and documented with a timestamp. The patient is flagged in your EHR as opted out. No further automated outreach is sent to that patient until explicit re-consent is captured. Opt-out records are maintained indefinitely.
Does mosAIQ screen-scrape my EHR?+
Never. All EHR connections use official vendor APIs or HL7 FHIR R4 endpoints — the same integration layer your other tools use. We do not store your EHR credentials on our systems. Your EHR vendor relationship and data agreement remain entirely intact.
How does the No Surprise Billing Act compliance work?+
Coverage verification is triggered automatically at the time of booking. A Good Faith Estimate is generated for applicable appointments and delivered to the patient before the visit. Out-of-network disclosure workflows are built into the scheduling sequence. Patient acknowledgment is captured and logged as required by the Act.
Is mosAIQ SOC 2 certified?+
mosAIQ is SOC 2 Type II ready — our architecture is designed to SOC 2 Type II controls across Security, Availability, and Confidentiality. A controls report is available to enterprise clients under NDA. Full Type II certification is in progress for 2026.
