Built to be trusted with your practice.

Patient information is handled under HIPAA.

We sign a Business Associate Agreement with every practice, every tool that touches patient details has signed one with us, and we only use the minimum it takes to book a visit: name, phone number, and new or returning.

Everything travels encrypted.

Every page, form and dashboard on axeonstudio.co and app.axeonstudio.co is served over HTTPS only. Browsers are told to never use an unencrypted connection to us (HSTS, two years), and certificates renew automatically.

• Hosted on Vercel's global edge network
• Data lives in a managed Postgres database, not on a laptop or a shared drive
• Security headers on every response: no-sniff, frame protection, strict referrer and permissions policies

AxeonPROOF accounts are locked down by default.

Your dashboard shows real people's names and numbers, so sign-in is built to keep everyone else out.

• Passwords are stored only as a bcrypt hash, so nobody at Axeon can see yours
• An account can only be set up by someone who can open the practice's inbox
• Too many wrong passwords locks the account for 15 minutes
• Reset links work once and expire after an hour
• Changing your password signs out every other device

Card details never touch our servers.

Payments run through Stripe's hosted checkout. Your card number goes straight to Stripe and never passes through Axeon.

Analytics that respect people.

We measure how the site is used so we can make it better. We don't run ads on it, and we never sell anyone's data.

• Anyone can opt out from “Privacy choices” in the footer
• We honor the Global Privacy Control signal automatically
• In AxeonPROOF, session recordings hide every piece of text and every input, so patient details never leave the browser

You own what's yours.

Your domain, Google Business Profile and patient contact data belong to your practice from day one, whether you stay or leave.

Found something? Tell us.

If you think you've found a security issue on our site or in AxeonPROOF, email hello@axeonstudio.co with “Security” in the subject. We read every report, and we'll tell you what we found and what we fixed.