Your practice data,
protected like a bank's
Lucid handles sensitive financial and patient-adjacent data. Here is exactly how we protect it, in plain language.
Talk to an ExpertSix layers of protection, by default
Encryption & access
Data is encrypted in transit (TLS 1.2+) and at rest (AES-256). Access is least-privilege, logged, and protected with multi-factor authentication.
SOC 2 controls
Our security program is aligned to SOC 2 Trust Services Criteria - security, availability, and confidentiality - with continuous monitoring and annual review.
HIPAA & BAAs
HIPAA-aligned handling for practice data, and a Business Associate Agreement (BAA) is available for practices that require one. Ask your expert to start one.
Responsible AI
AI keeps your books current, and your dedicated CPA (available 24/7) owns the final numbers. Your data is never sold and never used to train third-party AI models.
Read-only bank links
Bank and card connections are read-only through trusted aggregators. Lucid cannot move your money - we only see the transactions needed to keep your books.
Accuracy guarantee
We stand behind our work. If we make a bookkeeping error, we fix it and cover any resulting penalty - and if we find no tax credits, you pay $0.