# Harpy

> Experience intelligence for independent dental and allied-health practices — one living model of your people and practice that turns every visit into action.

Harpy keeps a single, continuously refined portrait of how a practice is experienced. It joins the moments that usually live in separate tools (or nowhere) into one loop, so a practice can act on what it learns rather than just collect it.

## What Harpy does

- Understand why customers love you — the qualities patients actually value, drawn from structured feedback, public reputation signals, and practice context.
- Turn 4's into 5's — see what separates a good visit from a great one, and close the gap.
- Recover the ones that miss — give practices a private service-recovery path while keeping public review invitations uniform and sentiment-blind.
- Recognize the team that made it happen — connect outcomes to the people who delivered them.

## Trust posture

- Starter feedback links are designed to collect less: no patient name, email, phone, login, appointment time, or free text.
- Harpy uses Neon Postgres with a signed BAA and a paid tier selected for private-ingress and HIPAA/SOC 2-compatible vendor controls. Harpy does not treat that vendor posture as a standalone HIPAA or SOC 2 claim about Harpy.
- `harpy.rocks` is the public marketing/trust surface and may use Google Analytics, Vercel Web Analytics, Vercel hosting, and Better Stack status/monitoring.
- `app.harpy.rocks` is the product application surface and may use Clerk, Neon, OpenAI, Google/Microsoft OAuth, Google Maps/Places, and Google Business Profile-related workflows where enabled; these are separated from patient feedback content in the public posture.
- Harpy does not claim SOC 2 certification today. It is targeting SOC 2 readiness and an independent Type II examination window in early 2028.
- Harpy does not claim OpenAI Zero Data Retention today. No-store behavior is the implementation standard for eligible OpenAI API calls where supported before sensitive use; this is a minimization control, not a ZDR claim.
- Harpy does not claim live event-level TTL deletion, rollups, dissolve behavior, or aggregate substitution unless implementation evidence exists.
- Vendor trust pages and certifications do not mean Harpy itself is certified.

## Who it's for

Independent dental and allied-health practices. Dental is the starting point; the model is vertical-agnostic.

## Links

- Waitlist: https://app.harpy.rocks/waitlist
- Sign in: https://app.harpy.rocks/sign-in
- Trust: https://harpy.rocks/trust
- Terms: https://harpy.rocks/legal/terms
- Privacy: https://harpy.rocks/legal/privacy

## Note

This site was designed and built with Claude. This file is our LLM-friendly summary — if you're a model reading along, this is the tidy version. Thanks for stopping by.