Privacy policy
Last updated October 10, 2026
Verradent LLC ("Verradent") provides practice-management software to dental practices. This policy describes how we handle information on our website and in the Verradent application.
Information practices submit
When a dental practice uses Verradent, it enters patient records, appointments, messages and financial information into the application. That information is protected health information (PHI) under HIPAA. The practice is the covered entity and controls the data; Verradent processes it only on the practice's behalf under a Business Associate Agreement (BAA).
Information we collect on the website
- Contact details you submit when requesting a demo.
- Standard server logs (IP address, browser, pages visited) kept for security.
How we use information
To provide and secure the service, respond to requests, and meet legal obligations. We do not sell personal information and we do not use PHI for advertising.
Text messages
Practices use Verradent to text their patients from the practice's own number: appointment reminders and confirmations, replies to messages a patient sends, payment links, and, where the practice turns them on, recall and review requests.
- Consent. A practice texts a patient only after the patient gives the practice their mobile number and agrees to receive texts, for example on the new-patient form, at the front desk or by texting the practice first.
- Frequency. It varies with your appointments and messages, typically a few texts a month.
- Message and data rates may apply, depending on your mobile plan.
- Opting out. Reply STOP to any text to stop receiving texts from that practice. Reply START to opt back in, or HELP for help. You can also ask the practice directly.
- Mobile numbers and text-messaging opt-in information are never sold or shared with third parties or affiliates for their marketing. They are shared only with the service providers that deliver the messages.
Artificial intelligence
Some Verradent features use artificial intelligence: drafting progress notes from a clinician's dictation, drafting messages, insurance narratives and appeal letters, reading EOBs and benefit documents, summarizing voicemails, answering questions staff ask about their own practice, and replying to routine patient texts such as questions about office hours. Drafts are reviewed by practice staff before they are signed or sent. The text receptionist answers only general office questions and passes booking requests and anything clinical to the practice's staff.
To do this, the information needed for each request, which can include PHI, is sent to our AI provider, Anthropic, which processes it on our behalf. It is not used to train AI models.
Dictation uses your web browser's speech recognition. In some browsers, such as Chrome and Edge, the browser maker processes the audio; Verradent receives only the resulting text.
Service providers
We use these providers to run Verradent. Each receives only what it needs for its part of the service.
- Supabase: database hosting and file storage
- Amazon Web Services (S3): file storage, when a practice's files are kept there
- A backup storage provider: encrypted off-site backups, encrypted before they leave our servers
- Vercel: application hosting
- Twilio: text messages and phone calls
- Stedi: insurance eligibility checks, claims and remittances
- Stripe: card payments
- Anthropic: artificial intelligence features
- Resend: email delivery
- Sentry: error reporting, with email addresses and phone numbers removed
- Expo: notifications to the staff mobile app, with no patient details in them
- Google and Microsoft: staff sign-in, for practices that turn it on
Patient portal
Patients sign in with a one-time link sent to the email their practice has on file, or a one-time code texted to the mobile number their practice has on file. The portal shows only the signed-in patient's (and their household's) information. Requests to see, correct or delete your records should go to your dental practice, which controls them.
Retention and security
Connections are encrypted, the database is encrypted at rest by our hosting provider, access is role-based, and staff sessions end after a period of inactivity. Sign-ins, chart views and changes to patient records are recorded in an audit log. Practices keep their records for as long as the law and their own policies require; when a practice leaves, we return its data on request and then delete it, except where the law requires us to keep it. See our security overview.