A: Hey info4192,

Good question, and I understand why it's important for your use case.

Here's the thing — HIPAA compliance is the responsibility of the healthcare provider (your clients, the clinic owners), not the marketing tool they use to build funnels and landing pages.

FlexiFunnels is a marketing and sales funnel platform. Your clients would be using it to build landing pages, capture leads, sell services, and run campaigns — collecting standard contact information like name, email, and phone number. That's marketing data, not Protected Health Information (PHI).

HIPAA applies to systems that store, process, or transmit patient health information — things like Electronic Health Records (EHR), patient management systems, medical billing platforms, telehealth tools, etc. A landing page that says "Book a Free Consultation" and collects a name and email is not handling PHI.

Your clients need to ensure HIPAA compliance in their own practice management and patient data systems — that's their domain. FlexiFunnels sits on the marketing side of their business, not the clinical side.

That said, we are actively working on GDPR compliance (targeting end of February) and are pursuing ISO 27001 and SOC 2 Type II certifications (targeting April) — so the platform's overall security and data protection posture is being formally certified.

You're right that GDPR and HIPAA are different — but the data security infrastructure we're building for these certifications (encryption at rest and in transit, access controls, audit trails, compliance documentation) strengthens the platform for all users, including those in regulated industries.

Let me know if you have any other questions 🙌