We build practical, compliance-first tools for the people who deliver care — the company behind Willowbridge and TenorMD, built to one engineering bar and one security program.
Each solves one real problem for clinical teams, end to end — built and operated by the same team, under the same controls.
A care-management platform for Medicare's non-face-to-face programs — CCM, TCM, RPM and the wider family of services. It captures every minute of cognitive care work, signs the clinical attestation, and hands a clean, auditable charge to the practice's EHR.
Multi-source provider feedback that's actually candid. TenorMD collects structured, anonymous input from peers, support staff and referring providers, then turns it into a coachable report with trends over time — so groups develop clinicians continuously.
We build deliberately — a small number of products, each done well. New tools join the Willowcare family under the same security program and the same standard of care. Tell us what you're missing →
Both products operate under a single Willowcare information-security program — the same policies, the same risk management, the same people accountable. We describe what's actually in place, and never claim certifications we don't yet hold.
We're pursuing a SOC 2 examination covering Willowcare and both products. Readiness work is in place; the independent examination is being scheduled. No badge until the report is issued.
A HIPAA Security Rule program with a designated Security & Privacy Officer. Willowbridge operates as a Business Associate and signs a BAA with every practice; TenorMD holds no PHI.
Encryption in transit and at rest, strict tenant isolation, mandatory MFA, tamper-evident audit logging, and U.S.-based hosting on infrastructure with its own attestations.
A U.S. company building software at the intersection of clinical care, documentation and compliance — the unglamorous places where good tools save real time.
In healthcare, "it works" isn't enough — it has to be defensible. We treat security, privacy and auditability as design requirements, not paperwork bolted on later.
A small number of products, each solving one problem completely. We'd rather do two things properly than ten things halfway.
Every product inherits the same security program, the same review process, and the same honesty about what is and isn't in place yet.
Whether you're evaluating a product, running a security review, or exploring a partnership — we're glad to talk.