How LBH Solutions protects agency and staff data across our products and training platforms.
Our products are built so protected health information never has to enter the workflow to get value. Staff enter de-identified inputs — consumer goals, concern areas, and service details without names, identifiers, or health specifics — and our AI returns structured clinical output (note-ready text, plan components, assessment content) that staff review and place into their own EHR. No PHI is stored in our systems.
Enforcement is layered: numeric input blocking to stop identifiers at entry, fail-closed PHI pattern scanning on every AI generation (if the scan cannot run, generation stops), mandatory 42 CFR Part 2 attestations for SUD-adjacent work, and audit trails covering every generation event and PHI scan result.
All AI processing for our products is performed through Google services covered by LBH Solutions' Google Workspace Business Associate Agreement (BAA). Model output is structured and constrained (Vertex AI / Gemini with response-schema enforcement) so every generation returns a predictable, reviewable clinical structure rather than free-form text. Because inputs are de-identified by design, the BAA coverage is a safeguard layer, not the only one.
These are the service providers that process data on our behalf. This list is maintained by LBH Solutions and was last updated September 2026.
LBH Solutions products and public websites are not intended to receive, and must not be used to transmit, protected health information. Staff and visitors should not enter consumer names, identifiers, dates of birth, or health details into any of our forms, training portal fields, or product workflows. Our safeguards (numeric blocking, fail-closed scanning, attestations, and audit logs) exist to enforce this design, and we maintain the audit records demonstrating that enforcement. Where a client agency requires a Business Associate Agreement for any engagement, we execute one before any covered work begins.
Security, privacy, or compliance questions: alash@lbhsolutions.org · 330-719-2593. See also our Privacy Policy and Terms of Service.