From patient intake to provider notes, these are the workflows that tend to end up in non-compliant tools at most med spas. Knack Health has solutions for every use case.

Build custom digital intake forms that collect medical history, allergy information, and treatment preferences and feed them into a secure, searchable database covered by your BAA.

Track which patients have signed which consent forms, when they signed, and for which procedures, with a timestamped record that holds up to a compliance review.

Store patient photos in a HIPAA-compliant environment with role-based access, linked to patient records by treatment date and procedure type.

Build a structured treatment log for each patient — procedures performed, products used, provider notes, and follow-up instructions — with access controls that keep sensitive records visible only to the right staff.

Send automated appointment reminders, follow-up messages, and treatment updates directly from your Knack app, with all communication tied to the patient record.

Maintain HIPAA-compliant records for provider licenses, certifications, and training documentation, with expiration alerts and role-based access keeping HR and clinical records separate.
You're running a business that's part healthcare practice, part hospitality operation, and most off-the-shelf tools weren't built with both in mind. Knack Health gives you a compliant operational foundation without requiring developers or an enterprise contract.
You need structured, accessible patient records — treatment history, consent documentation, medical intake — without the overhead of a full EMR. Knack Health gives you a configurable system that fits how your practice actually operates.
Compliance, credentialing, and patient data across multiple locations creates risk that shared drives can't handle safely. Knack Health supports centralized databases with location-level access controls so each site operates independently while leadership has full visibility.
Every Knack Health account includes a signed Business Associate Agreement as standard — no separate request, no enterprise tier required.
Patient data is encrypted at rest and in transit. Role-based permissions let you control exactly who can access treatment records, photos, and consent documentation — by role, not by trust.
Every change to a patient record is logged with a timestamp and user attribution. That's the kind of documentation that matters when you're responding to an audit or a patient dispute.
“Knack is instrumental in the daily running of the business. It literally runs every facet of our company, from front to back. In the beginning, it probably took me three or four days to build out a new section. Now I can build something new in under an hour.”

CEO, Curetech

Founder, Social Health Research

Royal Free London NHS Foundation Trust, University College London Director
Choose the level of compliance and support your team needs.
Ideal for:
Clinics, practices, and healthcare teams with core HIPAA and security requirements.
Features:
HIPAA-ready hosting and signed BAA
Encrypted data storage and transfer
Record change log history
Fully HIPAA-compliant AI app builder
Ideal for:
Larger healthcare organizations and networks with advanced security, integration, or support needs.
Features:
Yes. Any medical spa that administers treatments by licensed medical professionals — injections, laser procedures, IV therapy, and similar — and collects patient health information is subject to HIPAA as a covered entity or business associate. That includes intake forms, treatment records, consent documentation, and before-and-after photos tied to patient identities.
Knack Health starts at $625 per month and includes unlimited users. See full pricing at Knack.com/Health/Pricing