Precise about what we are, and what we are not.

Vayra operates a HIPAA compliance program covering the administrative, physical and technical safeguards that apply to protected health information on the platform. There is no government certification for HIPAA, and we do not claim one.

When a partner uses the platform to create, receive, maintain or transmit protected health information, Vayra signs a Business Associate Agreement before that data flows. We hold our own upstream BAAs with subprocessors that touch protected health information, including Anthropic for Vayra Intelligence and Microsoft for Azure. How to request a BAA.

Many states have corporate practice of medicine rules that prohibit a business not owned by licensed physicians from practicing medicine or controlling clinical decisions. The rules, and how strictly they are enforced, vary by state.

Vayra is organized for that. Vayra Health & Wellness, Inc. is a management services organization: it provides technology, operations, billing and administrative services. Vayra Medical, P.C. is a professional corporation that provides clinical services through licensed clinicians. Clinical decisions, protocols and the exercise of medical judgment sit with the professional corporation and its clinicians, not with the management company and not with the software.

When partners use Vayra clinicians, their patients receive care from Vayra Medical, P.C. Partners manage their brand and business and do not direct clinical decisions. When partners bring their own clinicians, their own professional entity carries that responsibility.

A clinician must generally be licensed in the state where the patient is located at the time of care. The platform routes each case only to clinicians licensed for that patient's state, and tracks license status and expiration per clinician.

Some states have additional requirements for telehealth, such as an initial synchronous visit for certain services or specific consent language. Those requirements are applied by program and state, and a case converts to a video visit where one is required.

Section 503A of the Federal Food, Drug, and Cosmetic Act covers compounding by licensed pharmacies for identified individual patients, based on a prescription. Compounded medications have not been through FDA approval for safety, effectiveness or quality, and they are not interchangeable with approved products.

Vayra routes compounded prescriptions only to licensed pharmacies that can lawfully dispense into the patient's state, for patient-specific prescriptions written by a licensed clinician after an individual evaluation.

Health advertising must be truthful, not misleading, and supported by competent and reliable evidence. That applies to your storefront, your ads and your social posts, and it applies to us.

Partners may not guarantee outcomes, publish unsubstantiated results, use fabricated testimonials or before-and-after images, state or imply that a compounded medication has FDA approval, claim a government certification for HIPAA (none exists), or suggest that AI tools diagnose or prescribe. We review launch copy against our acceptable use policy and can suspend programs whose marketing breaks it.

Some payment processors, ad platforms and marketplaces require a telehealth or pharmacy certification before they will work with a brand. We support partners through those applications with documentation of the clinical model, pharmacy relationships and compliance program. We do not represent that any certification will be granted.