Patient feedback and Google reviews, with a signed BAA.
We sign a Business Associate Agreement, run your account in a separate US environment, and never take clinical details from your practice systems. You hear from every patient after their visit and grow your Google reviews, with every patient asked the same way.
Billed annually from $249/month · Set up with you on a call
Built for practices that handle patient information
If your practice is covered by HIPAA and you want Spokk to work with patient names, contact details and visit information, this is the plan for you.
Not sure whether HIPAA applies to you? HHS explains who counts as a covered entity. If it does not apply, the standard plan from $149/month, billed monthly, is the better fit.
What the Healthcare plan includes
One clear job, done well: hear from every patient after their visit, fix problems fast, and grow your Google reviews.
Private patient feedback
A short form by text or email after each visit. Ratings, comments and clinician ratings land in your private dashboard, and low ratings reach your team straight away.
Google review invitations
Every patient gets the same invitation to review you on Google, whatever their rating, with an AI draft written from what they shared. Patients edit it and post it from their own account.
AI review replies
Spokk drafts replies to your new Google reviews for you to approve. Keep them general: a reply should never confirm that someone is a patient.
Automated texts and emails
Feedback requests and reminders go out on their own after each visit, at the times you choose.
Clinician and location ratings
See how patients rate each clinician and each location over time, so you know where to coach and what to celebrate.
Front-desk accounts
Front-desk staff can send feedback requests without being able to read what patients wrote.
How we protect patient information
A summary of the safeguards in our Business Associate Agreement. The BAA is the binding commitment.
Separate, US-based hosting
Your account runs in Spokk's dedicated healthcare environment on Amazon Web Services in the United States, kept apart from Spokk's standard service, which never holds patient information.
Encrypted at rest and in transit
AES-256 encryption for the database, stored files, backups and logs, and TLS 1.2 or higher for all traffic over the internet.
Only the right people get in
Everyone has their own login. Two-factor authentication is available to your staff and required for Spokk staff, and sessions sign out after 15 minutes of inactivity, with a warning first.
Every access is recorded
Each view, change and export of patient feedback is logged: who, which record and when. The log cannot be edited and is kept for six years.
Only the data we need
Name, phone, email, contact preferences and consent, visit date and time, location and clinician. Never diagnoses, clinical notes, medications, insurance details, Social Security numbers or dates of birth from your systems. Patients under 18 can be skipped automatically.
No trackers and no AI training
No advertising, analytics or tracking tools run in the healthcare environment. AI features run inside AWS, and your data is never used to train AI models, never sold and never used for marketing.
Two subcontractors, both under BAAs
Amazon Web Services for hosting, messaging and AI, and Google Workspace for email with your team. You get 30 days' written notice before any new subcontractor handles patient information.
If something goes wrong
Continuous threat detection with alerts to our team. A breach is reported to you within 5 business days, with a first notice within 72 hours where possible.
Your patients' rights
Account owners can download a patient's complete record from the dashboard in one click. Amendments and accountings of disclosures are handled within 10 business days.
Backups, and if you leave
Encrypted backups with point-in-time recovery, kept for 30 days. When your plan ends, we return or destroy your data within 30 days and certify its destruction on request.
Before you sign, we send you our one-page security summary and the BAA to review. Security questions: hello@spokk.io
What we leave out, and why
Some Spokk features are switched off on the Healthcare plan. They market to patients or put patient stories on public pages, which HIPAA generally allows only with written authorization from each patient.
Switched off on this plan
- Loyalty rewards
- Referral rewards
- Testimonials (video, image and text) and the Wall of Love
What you get instead
- Every patient asked the same way. Asking only happy patients is review gating, which Google does not allow.
- Low ratings reach your team straight away, so someone can follow up personally.
- A focused plan your practice manager can explain to the team in five minutes.
HIPAA is a shared job. Here is your side of it.
Four habits that keep your practice and your patients safe. We go through each one with you during setup.
- 1Keep clinical details out of texts and emails, which are not encrypted once they leave our systems.
- 2Choose who is contacted, and at which number or address.
- 3Turn on two-factor authentication for your staff.
- 4Never confirm in a public review reply that someone is a patient.
Custom features and integrations, included
Need something Spokk doesn't do yet, or a connection to a system your practice already uses? Tell us. If it's within our ability and fits your BAA, we build it and set it up for you at no extra cost. It's part of your plan, and we keep working with you until you're happy with how Spokk works for your practice.
How to get started
- 1
Book a 15-minute call
We check the plan fits your practice and quote your price.
- 2
Sign the BAA and order form
Both are short, and both are signed before any patient information is shared.
- 3
Set up together
On a second call we set up how patients reach Spokk, your feedback form and your review invitation, and send your first requests.
Please do not load patient information into a standard free trial. The trial runs on our standard service, which is not covered by a BAA.
Healthcare plan
Starting price ($2,988 a year)
Your price depends on the features you choose and how many patients you serve each month.
- Signed Business Associate Agreement
- Separate US environment on AWS
- Patient feedback by text and email
- Google review invitations with AI drafts
- AI replies to Google reviews
- Clinician and location ratings
- Front-desk accounts
- Setup with you on a call
- Custom features and integrations built for you at no extra cost, within your BAA
Not covered by HIPAA? Spokk starts at $149/month, billed monthly. See standard pricing
Frequently asked questions
Is Spokk HIPAA compliant?
No software is HIPAA compliant on its own, because compliance also depends on how a practice uses it. On the Healthcare plan, Spokk signs a Business Associate Agreement with your practice, runs your account in a separate US environment built to the HIPAA Security Rule, and gives you the controls to do your part, such as front-desk accounts that cannot read feedback and two-factor sign-in.
Will you sign a BAA?
Yes. Every Healthcare plan customer signs a Business Associate Agreement with Spokk US, Inc. before any patient information is shared. The BAA is the binding commitment, and this page summarizes it.
How much does the Healthcare plan cost?
It is billed annually and starts at $249 per month ($2,988 a year). Your price depends on the features you choose and how many patients you serve each month, and we confirm it on a short call.
Can I try it with a free trial first?
Please do not load patient information into the standard free trial. It runs on our standard service, which is not covered by a BAA. Book a call instead and we will walk you through the Healthcare plan and set it up with you.
Does every patient get asked for a review?
Yes. Every patient gets the same invitation, whatever their rating. Asking only happy patients is review gating, which Google's policies prohibit. Low ratings also reach your team straight away so you can follow up.
What patient information does Spokk keep?
Only what it needs to send requests and show you results: name, phone, email, contact preferences and consent, visit date and time, location and clinician. Spokk never stores diagnoses, clinical notes, medications, insurance details, Social Security numbers or dates of birth from your practice systems, and patients under 18 can be skipped automatically.
Which features are not on the Healthcare plan?
Loyalty rewards, referral rewards, testimonials (video, image and text) and the Wall of Love. They market to patients or put patient stories on public pages, which HIPAA generally allows only with written authorization from each patient, so the plan focuses on feedback and reviews.
Where is our data stored?
In Spokk's dedicated healthcare environment on Amazon Web Services in the United States, kept apart from Spokk's standard service. Our only other subcontractor for patient information is Google Workspace, for email with your team, and both are under BAAs.
Do you charge extra for custom features or integrations?
No. Need something Spokk doesn't do yet, or a connection to a system your practice already uses? Tell us. If it's within our ability and fits your BAA, we build it and set it up for you at no extra cost. It's part of your plan, and we keep working with you until you're happy with how Spokk works for your practice.
Talk to us about the Healthcare plan
Fifteen minutes is enough to see whether it fits your practice and what it would cost.
Book a callOr email hello@spokk.io