We build secure websites, avoid storing PHI, and use compliant tools for forms, analytics, and patient communication.