Admin HIPAA COMPLIANCE

General Questions
1

our calmhaven.app has pickaxes that provide advice. " 14 powerful AI guides. Infinite paths to clarity. Welcome to Calmhaven.app — Your Sanctuary for Clarity, Growth, and Inner Power Step into a studio of 14 powerful AI guides, each designed to meet you exactly where you are — whether you’re …" Someone asked me if we are HIPPA compliant. Are pickaxes HIPPA compliant and do then need to be?

1 Like
2

If you want to be HIPPA compliant, the first one thing you’ll want to do is toggle off ‘Collect History’ setting found under the Settings tab of the Studio. I’ve included a screenshot. This is very important. That is the most important thing from the Pickaxe side.

Then you’ll want to look into some other requirements for HIPPA. I’m not a certified expert so can’t give you great advice. If you want to add, for example, a cookie consent pop-up you can do that sorta thing in the Settings tab as well.

Xnapper-2025-04-16-08.59.55
Xnapper-2025-04-16-08.59.551920×1080 61.9 KB

Cookies issues from Pickaxe backend | Cookie Policy
3

For anyone looking to create the cookie pop up box at the bottom of their studio and pickaxes you can use the code below and paste it into the footer box.

<style>
  #cookieConsentBanner {
    position: fixed;
    bottom: 20px;
    left: 20px;
    right: 20px;
    background: #222;
    color: #fff;
    padding: 16px;
    z-index: 9999;
    border-radius: 8px;
    box-shadow: 0 2px 10px rgba(0,0,0,0.3);
    display: none;
    font-family: sans-serif;
  }
  #cookieConsentBanner button {
    margin-left: 10px;
    padding: 8px 12px;
    background: #f1c40f;
    border: none;
    color: #000;
    cursor: pointer;
    border-radius: 5px;
  }
</style>

<div id="cookieConsentBanner">
  This website uses cookies to ensure you get the best experience.
  <button id="acceptCookieBtn">Accept</button>
</div>

<script>
  document.addEventListener("DOMContentLoaded", function() {
    const banner = document.getElementById("cookieConsentBanner");
    const btn = document.getElementById("acceptCookieBtn");

    if (!localStorage.getItem("cookieConsentAccepted")) {
      banner.style.display = "block";
    }

    btn.addEventListener("click", function() {
      localStorage.setItem("cookieConsentAccepted", "true");
      banner.style.display = "none";
    });
  });
</script>
3 Likes
4

Nice one @jeanette ! This is very helpful for users who intend to become/remain HIPAA compliant.

1 Like
5

Is Pickaxe fully HIPAA compliant yet?

6

If you have an agreement from one of our model providers for HIPAA compliance, we can accommodate you on enterprise to be fully HIPAA compliant. Let us know at info@pickaxe.co if you have secured such an agreement.

7

This is interesting @nathaniel Have you heard of a model accommodating HIPPA? I get this question ALL THE TIME!

1 Like
8

@jeanette we’ve seen several instances of model providers like OpenAI and Claude doing so! If you can work something out with them, we would be more than happy to work with you on this :slight_smile:

9

I just posted a related question

For more community-service apps like this, especially if they are provided for free, can the user opt out of HIPPAA for the convenience of, for example, having some of their kids’ general information stored, so that they don’t have to included it on every question they ask?

For the more informed ones, SOC II should be meaningful, right?

So that a reasonable person could easily make that tradeoff of 100% HIPPAA compliance for convenience?

I hope that makes sense. Appreciate any guidance.

10

Hi @kenlyle, just replied on your other thread! It’s a good question, and I think ultimately the answer will depend on the parents’ level of comfortability, but we are committed to establishing a secure environment and happy to work with our users to fill in any gaps!