Compliance

Praelo is not a law firm and does not provide legal counsel. For every regulated build, we provide a written compliance attestation document at handover stating which professional rules were applied to your system. Your own counsel reviews for your specific situation. The current rulebooks we ship against:

• hipaa_privacy_rule

  45 CFR 164.500–534 (HIPAA Privacy Rule, last amended 2013 Omnibus Rule)

  Patient testimonials about clinical content are not de-identified merely by removing the name; full quote-level review required. Aggregate outcome statements permitted only with statistical basis.

• ca_psychology_board

  CA Business & Professions Code §2960; Title 16 CCR §1396

  CA Board of Psychology aggressively enforces §2960. Specialty claims require board certification or recognition.

• ny_education_law_6509

  NY Education Law §6509

  Verifiable credentials; advertising restrictions per NY Office of the Professions.

• tx_occupations_501

  TX Occupations Code §501

  Texas Board of Examiners of Psychologists rules apply.

• fl_statute_490

  FL Statute §490

  Florida Board of Psychology applies advertising restrictions per state board.

• il_psychology_225

  Illinois 225 ILCS 15 (Clinical Psychologist Licensing Act)

  Illinois Department of Financial and Professional Regulation enforces.

• co_ley_1090

  Colombia Ley 1090 de 2006 (Código Deontológico) + Colpsic registration

  Ley 1090 prohíbe explícitamente publicidad sensacionalista o que prometa resultados específicos en salud mental.

• mx_cedula_profesional

  Ley Reglamentaria del Artículo 5o Constitucional + NOM-035-STPS-2018 (riesgos psicosociales)

  El uso de testimonios requiere consentimiento explícito por escrito y cumplimiento de LFPDPPP (reforma 2025). INAI fue disuelto en 2025; enforcement pasó a Secretaría de Anticorrupción y Buen Gobierno.

What this isn't

• It is not a substitute for legal counsel.
• It is not SOC 2, ISO 27001, or PCI-DSS certification.
• It is not an executed HIPAA Business Associate Agreement (BAA). We deliver a BAA-ready architecture; you sign BAAs with your own vendors.