Trust \u00B7 2026

Trust, audited \u2014 not assumed.

Patient data is the most sensitive thing your practice owns. Here's every mechanism that protects it \u2014 compliance frameworks, legal counsel, data boundaries, guarantees, founder accountability \u2014 and the commitments we've put in writing.

0%
per-patient fees
Flat SaaS fee only. Per-rebook pricing violates state anti-kickback statutes.
1-click
cancel anytime
Self-serve cancel from the dashboard. Data export in under an hour. No retention team call.
<1hr
data export SLA
Patients, campaigns, replies, bookings \u2014 CSV + JSON, emailed directly to you.
100%
money-back pilot
First 10 pilots: if we don\u2019t rebook 10 patients in the first 30 days, we refund the trial extension \u2014 in full.
01
Founder

One person is accountable. On the line.

Most dental SaaS is bought from a sales rep who won\u2019t remember your name in 90 days. usdpr. is founder-built, founder-supported, and founder-accountable. If something breaks, my phone rings. If the product needs fixing, I\u2019m the one fixing it that afternoon \u2014 not a three-week support-ticket queue.

Colin Smith \u2014 Founder & sole operator
Orlando, Florida \u00B7 2026

I built usdpr. because the existing tools bundle reactivation with 20 other features and the depth isn\u2019t there where it counts. I talk to every new practice personally during onboarding. My email is colin@usdentalpatientrecovery.com. My phone is the one on your invoice. I read every reply. Read the full founder letter \u2192

\u2014 Colin
02
Legal & counsel

Reviewed by Florida healthcare counsel. Before we ever touch patient data.

Dental reactivation sits at the intersection of HIPAA, TCPA, CAN-SPAM, state anti-kickback statutes, and state dental-board rules. Getting any one wrong is a felony or a license issue. So the entire product \u2014 terms, BAA template, pricing model, message templates \u2014 is reviewed by a Florida healthcare attorney before it touches a practice\u2019s data.

HIPAA BAA HelloSign e-signed before any PHI moves. Covers workforce, subprocessors, breach notification, and return/destroy on termination. Counsel-reviewed 2026-Q1
TCPA A2P 10DLC Carrier-registered campaigns with enforced rate limits (1/day, 3/week per patient). STOP honored immediately and permanently. Twilio brand verified
CAN-SPAM Physical-address footer, functional unsubscribe, honest subject lines, 10-business-day removal SLA \u2014 codified in the send pipeline. Enforced pre-send
FL \u00A7817.505 Flat SaaS fee only. Florida \u00A7817.505 (Patient Brokering Act) makes per-patient referral fees a felony. Our pricing is designed to sit cleanly inside the referral-services safe harbor. Never per-rebook
State dental boards FL Rule 64B5-4.002 exempts a dentist\u2019s agent from solicitation rules when contacting existing or former patients. We only contact your patients, under your practice name. Existing-patient only

Per-patient reactivation fees are a felony in Florida under \u00A7817.505. The flat-fee model isn\u2019t a marketing choice \u2014 it\u2019s the only compliant structure.

The pricing argument, in one sentence
03
Security posture

Engineered to the HIPAA Security Rule, then independently audited.

Every send, reply, and booking is logged with an immutable audit trail. Data at rest on encrypted volumes (AES-256). Data in transit is TLS 1.2+. Role-based access with least-privilege defaults. No shared credentials, no PHI in logs, no PHI in error traces. The full posture lives at /security; the highlights sit below.

Encryption AES-256 at rest. TLS 1.2+ in transit. HSTS, CSP, SRI on every outbound request. All US regions
Audit logging Every send, reply, booking, export, role change, and auth event is logged with an append-only writer. Logs retained 7 years. Exportable any time
Access control Role-based with least-privilege defaults. SAML 2.0 SSO (Okta, Azure AD, Google Workspace) on every tier. No shared logins. SSO included, not add-on
Incident response Written IR plan, quarterly-tested. Customer notified within 24 hours of any incident affecting their data. 24h breach SLA
PHI handling PHI scrubber enforced at the database query layer \u2014 no treatment details, procedure names, or diagnoses ever reach an outbound message body. Enforced in code
04
Data commitments

Your data. Your export. Any time. No retention games.

If you leave \u2014 even on the last day of a free trial \u2014 you take everything with you. Patients, messages, replies, bookings, reports, logs. CSV + JSON. Emailed to you in under an hour, or the trial extension is free. We're not in the business of holding customer data hostage.

No resale We never sell, rent, or license customer data. Not to insurers, not to marketing platforms, not to benchmarking services. Contractually forbidden
No cross-tenant signals No aggregated benchmarking, no "practices like yours" features, no model training on your data. Every tenant\u2019s data is walled off. No exceptions
Zero-retention AI Reply-intent classification uses Anthropic\u2019s zero-data-retention tier. Your message data is never stored by the model provider, never used for training. DPA in place
Portable export Self-serve "Download everything" from the dashboard. CSV + JSON. Under 1 hour. Active clients can request unlimited exports. Free, any time
Deletion SLA On termination: return-or-destroy within 14 days per BAA. Written attestation on request. BAA \u00A7 3.b
05
Guarantees

Four commitments in writing. No small print.

Trust is earned by what you\u2019ll do when things go sideways. These are the commitments we'll refund against \u2014 signed into the Service Agreement.

If the first 30 days don\u2019t recover at least $X, the month\u2019s fee is refunded \u2014 no call.
Pilot-program practices: if usdpr. doesn\u2019t deliver at least 10 rebooked, shown-up patients in the first 30 days of your paid month, we refund that month in full. No retention call. No gotcha. One-time refund per practice.
Applies once per practice First 10 pilots only Paid out in 7 days
06
Pilot program

Only 10 pilot practices. Founder-level access for life.

Join the first 10 \u2014 lifetime Practice Pro rate locked in.

Practices who sign up before we close pilot-10 get the Practice Pro tier ($697/mo) permanently locked, regardless of future pricing. They also get personal onboarding with the founder, monthly roadmap calls, and the 30-day money-back guarantee above. In return: one honest written review on G2 or Capterra at day 60.

  • Lifetime rate lock. $697/mo now, forever, even as list price climbs.
  • Founder onboarding. 90-minute live session \u2014 templates, segmentation, launch plan \u2014 not a generic Loom.
  • Monthly roadmap call. First 6 months: direct influence on what we build next.
  • Money-back guarantee. 10 rebookings in 30 days or that month is refunded.
  • Priority feature access. Dentrix, Eaglesoft, Curve integrations: your practice is first in line.
Claim a pilot slot
07
Counsel, partners

We don\u2019t do this alone.

Solo-founded doesn't mean unaccompanied. Here's the network of specialists who review, host, or underwrite pieces of what we do.

Legal \u00B7 healthcare
Florida healthcare counsel
Reviews BAA, Terms, Privacy, pricing structure, and all state-compliance claims.
Infrastructure
Fly.io \u00B7 US regions
HIPAA-eligible compute with DPA. Encrypted volumes, least-privilege IAM.
SMS delivery
Twilio \u00B7 10DLC registered
Carrier-brand registered; BAA in place; rate-limited at application layer.
Email delivery
Resend \u00B7 authenticated
DKIM + SPF + DMARC on every send. DPA signed. No patient clinical details in body.
Payments
Stripe \u00B7 PCI-DSS Level 1
We never see card numbers. Subscription billing + invoice receipts through Stripe Checkout.
E-signing
HelloSign (Dropbox Sign)
Legally binding e-signature audit trail. Used for BAA, Service Agreement, Payment Authorization.
AI reply triage
Anthropic \u00B7 zero-retention
Zero-data-retention tier. Message contents not stored, not used for training.
Analytics
Plausible \u00B7 cookieless
No cookies, no PII, no cross-site tracking. GDPR + CCPA friendly by default.
08
Transparency

Quarterly public report. Numbers we publish, whether they flatter us or not.

Starting Q4 2026, we'll publish a quarterly transparency report covering: active practices, patients under care, uptime, send volume, reply rate, reactivation rate, refund rate, incident count, and the security + compliance changes we shipped that quarter. Good numbers or bad \u2014 same page, same frequency.

The only companies that refuse to publish numbers are the ones whose numbers don't support the pitch. We'd rather you see both sides than market against a selection bias.

Why we publish a quarterly report

Until Q4, the active benchmarks live on the calculator (with sources), in the Reactivation Playbook, and in the changelog. A public status page is already live at /status.

Start the trial. Cancel in one click if we don\u2019t earn the month.

14 days free, no credit card. BAA e-signs in 90 seconds. Email campaigns live the same afternoon. Data exports in under an hour, any time. Every commitment on this page is contractually backed.

Start free trial Read the founder letter Ask Colin directly