Theranvio - Security

Security and Telehealth

This page describes the current Theranvio Video safeguards, technical support model, incident handling, and compliance-claim status.

Last updated: June 16, 2026

1. How Theranvio Video works

Theranvio Video is an optional online-appointment module connected to the appointment workflow, Client Space, and clinician calendar. When enabled, the room is created for a specific appointment and can be accessed only through an authorized link.

room access is time-limited to the appointment window;
the clinician can admit, decline, or return a participant to the waiting room;
Theranvio does not record calls or preserve chat as clinical documentation;
an external fallback link may remain attached to the appointment as a backup;
participant-minute allowances reduce uncontrolled cost and abuse risk.

2. Media provider and processing

Theranvio Video is designed around a replaceable provider adapter. The current technical target for embedded video is Amazon Chime SDK, while external Zoom, Google Meet, or Teams links may still be used as an alternative.

Theranvio stores only the data required to run the appointment, authorize the room, control access, and enforce usage allowances. Audio and video are not retained by Theranvio as recordings.

3. Telehealth technical support

Connection issues should be reported through the Theranvio Video contact path. To help without compromising confidentiality, reports should include technical context rather than clinical content.

device and operating system;
browser and version if known;
approximate appointment time and participant country or region;
whether the issue affected audio, video, screen sharing, waiting room, or links;
whether the external fallback link worked.

Do not include session content, clinical notes, diagnoses, or data that is not needed to solve the technical issue.

4. Incidents and appointment continuity

If the media provider is unavailable or the connection is unstable, the clinician should use the fallback link or agree on an alternative channel consistent with their practice rules. Theranvio Video is designed so a technical issue does not block the appointment itself.

rooms expire around the appointment time;
ending or canceling an appointment revokes room access;
host links and meeting tokens should not be sent outside the app;
suspected link exposure should be reported through technical support.

5. HIPAA, BAA, and compliance claims

Theranvio does not make a public HIPAA compliance claim merely because it uses an eligible technology provider. Such a claim requires appropriate agreements, configuration, processes, processing scope, and assessment of the full product stack.

If Theranvio is used with US protected health information, the required provider agreements, including the relevant BAAs, must be accepted first, and security, access, support, and incident processes must be verified.

Until the required agreements and processes are complete, Theranvio may describe technical safeguards but should not market the feature as HIPAA compliant.

Security contact

For security, privacy, telehealth, or technical incident questions, contact us by email.

support@theranvio.com

This page reflects the current security and telehealth model. It should be updated before any public HIPAA claim, video-provider change, recording, or transcription launch.