Your practice, walled off
Every practice runs in its own environment with its own database. Your patients never share a database with another customer's.
Security
Health data deserves a boring, careful answer.
Orthodontic practices trust us with families' health information, including children's. So security isn't a feature we bolt on. It shapes how every part of HoYS is built, hosted and run.
How we protect data
Six safeguards, built in from day one
No passwords to leak
Patients confirm who they are with details only they know, then a passcode sent to their phone, before any form or portal screen opens.
The right access for each person
Staff see what their role needs and nothing more. Admin tools, branding and publishing stay with the people you choose.
Dolphin stays protected
Only our servers talk to Dolphin. A patient's phone or browser never connects to your practice management system.
Card numbers never touch us
GoDaddy Payments (Poynt) tokenizes every card. HoYS keeps the token and receipt details, never the card number.
A record of every action
An activity log captures staff, patient and system actions, so questions get answered with facts instead of guesses.
Behind the scenes
Hosting you can count on
Where your data lives
- 01Hosted on Amazon Web Services (AWS) in the United States
- 02Every connection encrypted in transit with TLS
- 03Nightly database backups stored off the main server
- 04Infrastructure redundancy to keep you running
How we keep watch
- 01Continuous monitoring for performance and security issues
- 02Searchable activity log of staff, patient and system actions
- 03Forms and notifications are versioned, with a clear publish step
- 04Texts and emails stay operational, and STOP and START are honored
Built for healthcare
HIPAA and COPPA, taken seriously
Your Business Associate
Your practice stays in control of patient data. HoYS handles it on your behalf as a HIPAA Business Associate, and Dolphin remains your system of record.
Designed for families with minors
Most orthodontic patients are kids. Consent and guardian handling are part of the design, not an afterthought, so parents and responsible parties stay in the loop.
Roles
Permissions inherit upward
| Role | Scope |
|---|---|
| Client | Day-to-day staff: notifications, messaging, patient records |
| Admin | Adds analytics, team management, activity, and builder drafts |
| Super Admin | Adds company branding and publishing of forms and notifications |
| HoYS Admin | Platform-level configuration |
Want the formal details on infrastructure, hosting, access and shared responsibilities?
Security OverviewBook a demo
See it running against your Dolphin data.
A demo covers intake, the Dolphin write-back, messaging, online scheduling, and payments, mapped to how your offices actually work.