Video sessions on It's Complicated are built on a secure, privacy-first foundation — from the moment a call starts to the moment it ends. Here's what protects you and your clients.
Powered by Stream
Our video solution is powered by Stream, a communications provider that is both HIPAA and GDPR compliant. These certifications confirm that Stream meets the strict privacy and security standards required for handling sensitive health information and personal data. You can read more on Stream's HIPAA compliance page and GDPR compliance page.
Encryption in transit
All video calls use the WebRTC protocol, which enforces high security standards by default — including encryption of all data in transit and robust encryption key negotiation. No video data travels over an unprotected connection. For the full technical details, see the WebRTC security specifications.
No recordings stored
Video data is processed on Stream's servers solely to power the call itself. Once a session ends, no video data is retained on any server. Your sessions are not recorded or stored without your knowledge.
You control access
Clients can only join your session through a confirmed appointment link or your personal waiting room. You decide when to admit anyone waiting — nobody enters a call without your knowledge.