Trust and your data
Built for HIPAA. The hosted offer and BAA start at launch, after the go-live checklist is signed. We do not claim a certification or a completed launch before that check.
Security and BAA at launch
Each hosted organization has its own data boundary. Access is limited to its own staff and clients. Nogn keeps the organization registry separate from clinical records. A click-through BAA will be part of hosted sign up at launch.
Nogn AI never trains on your records. Wavey works with the records your organization permits it to read. SCRiB drafts notes and reports from session transcripts, and a clinician reviews and signs each one.
Where your data lives
Nogn Cloud
From the hosted launch, we will run your organization on our own hardware in US data centres. Clinical records stay in your hosted organization. The nogn.app registry holds no clinical records: it keeps workspace and plan details, sign in accounts, contact requests and signed agreement records.
On your own server
With this option, Maxwell runs on a Mac or Linux box you own, and clinical records stay on that server. The registry still holds no clinical records, only the account, plan, contact and agreement details above.
Backups and export
The hosted launch includes encrypted backups with a readback check. On your own server, backups go to the NAS you configure and remain encrypted. You can export your records as an encrypted file and move between the two modes.
Who does what
With Nogn Cloud, we will run the server, backups, updates and availability checks. With your own server, your practice provides the box, power, network and NAS. Nogn supplies software updates and health monitoring over the support connection you authorize. Your practice controls physical access and local recovery.
A BAA may also be needed for support access to your own server. That question is under review, so this page makes no BAA promise for that mode.
Hosted status
Hosted status page will publish service availability at launch.