Server-side conversion tracking
Curve Compliance replaces ad pixels with a first-party script and US-hosted relay that sends ad platforms PHI-free conversions, with identifiers SHA-256 hashed. Campaigns keep optimizing on real outcomes.
Curve Compliance: HIPAA-compliant ad tracking for healthcare advertising
Curve Compliance is a HIPAA-compliant ad tracking and attribution platform that sends PHI-free, server-side conversions to Meta, Google, TikTok and Microsoft instead of patient data, for healthcare advertisers from independent practices to national health organizations.
Every plan includes a signed BAA. The US-hosted relay checks each event for PHI patterns, hashes identifiers with SHA-256, forwards only mapped fields and logs every outbound payload.
4.9/5
average rating from healthcare organizations
PHI removed ยท BAA signed
Meta
Google Ads
TikTok
Microsoft Ads
LinkedIn
Google Analytics- Category
- HIPAA-compliant ad tracking and attribution
- Headquarters
- New York, NY
- BAA
- Signed, on every plan
- Security
- SOC 2 Type II, US-hosted
- Destinations
- Meta, Google, TikTok, Microsoft, LinkedIn and more
- Go-live
- 5 to 7 business days, installed for you
What Curve Compliance does
One first-party script, one US-hosted relay and one signed BAA, from the first conversion to the campaign report.
Sends to
- Meta Conversions API
- Google Ads
- Google Analytics 4
- TikTok Events API
- Microsoft Ads
- Amazon
Connects with
- CallRail
- VWO
- HubSpot
- Salesforce
- Segment
- GoHighLevel
- 400+ healthcare apps via Keragon
Track
Attribution through booking tools and offline conversions
Curve Compliance's bridge tokens carry attribution through IntakeQ, Calendly, Jane App and GoHighLevel, and cross-domain tracking follows visitors between sites. Offline conversion uploads return booked appointments to the ad platforms as PHI-free conversions.
Measure
HIPAA-safe web analytics
Curve Compliance's web analytics cover pages, funnels and campaigns under its BAA, in place of Google Analytics 4. Teams keep their reporting without a risky analytics tag.
Session replay and heatmaps
Curve Compliance records sessions and builds heatmaps with PHI masked. Teams see where visitors stall on intake and booking flows.
Marketing performance reporting
Curve Compliance reconciles the conversions it sent with what each ad platform received, alongside spend and conversions by campaign. Marketers work from one reconciled set of numbers.
Protect
Website pixel scanner
Curve Compliance's free scanner shows which tags on a healthcare website, such as the Meta Pixel or GA4, can expose patient data. You get a concrete fix list.
Forms and consent management
Curve Compliance's HIPAA-compliant forms and consent management run under the same BAA as your tracking. Every intake or lead form submission becomes a trackable conversion.
Ask
Curve MCP
Curve MCP is the first world-class MCP server for healthcare marketing data, reconciling what Curve Compliance sent, what each ad platform accepted and what was matched, per campaign. Any MCP client connects read-only.
A signed BAA on every plan
Meta and Google will not sign a BAA for ad tracking. Curve Compliance signs one on every plan, custom on Enterprise, and sends the platforms conversions, not patient data.
Usage-based pricing, scoped on a call
Freshpaint typically costs $30,000 to $50,000 or more a year. Curve Compliance pricing is usage-based: book a call and Curve's team will tell you what yours would be.
Freshpaint
$30k to $50k+
a year, typically
Curve Compliance
Usage-based pricing. Book a call to find out what yours would be
Live in about a week, installed for you
Building HIPAA-safe server-side tracking in-house takes about 6 months of engineering, then upkeep. Curve Compliance's team installs, maps and QAs it, and most customers are live in 5 to 7 business days.
In-house build
~6
months of engineering, then upkeep as destinations change
Curve Compliance
5 to 7
business days to go-live for most customers, installed by Curve's team
Attribution that follows the patient to booking
Healthcare conversions often finish in a booking tool on another domain, where the Meta Pixel and GA4 on your site lose the click. Curve Compliance's bridge tokens carry the click through IntakeQ, Calendly, Jane App and GoHighLevel to the appointment.
Built for PHI, with proof of what was sent
Hyros and Triple Whale are e-commerce attribution tools not built to sign BAAs. Curve Compliance is SOC 2 Type II and US-hosted, checks every event for PHI before egress and logs every outbound payload.
The first world-class MCP server for healthcare marketing data
Meta Ads Manager and Google Ads each report only their own view. Curve MCP, from Curve Compliance, reconciles your server-side campaigns across all of them, sent vs accepted vs matched, and answers in Claude, ChatGPT or Cursor.
Who uses Curve Compliance
Curve Compliance serves healthcare organizations that advertise online and handle protected health information, from single-location practices to national telehealth platforms.
Independent and single-location practices:
Dental, dermatology, med spa, behavioral health and specialty practices, with no in-house engineer needed.
Typical plan: Compliance
Direct-to-consumer telehealth and online pharmacy brands:
Brands whose paid social and search drive intake and checkout on condition and treatment pages.
Typical plan: Compliance or Growth
Multi-location groups:
Dental, orthopedic, aesthetics and primary care groups with several locations, domains and booking tools.
Typical plan: Growth
Multi-state provider networks:
Community care, behavioral health and specialty networks on CRMs such as GoHighLevel, HubSpot and Salesforce.
Typical plan: Growth or Enterprise
National telehealth platforms and health organizations:
Organizations that need their own BAA language, consent management and custom volume.
Typical plan: Enterprise
Dental practice
The onboarding felt personal and attentive, and the integration with our systems was seamless; we were seeing meaningful results almost immediately.
Luis Perez , DMD, Pelican Dental Care Community care
Curve makes HIPAA-compliant analytics affordable and accessible. If you're in healthcare marketing and tired of flying blind on attribution, it's worth taking a look.
Richard Reams , Director of Marketing, Palmetto Community Care National telehealth
Working with Curve Compliance has been a valuable addition to our analytics infrastructure at Precision Telemed. As a nationwide, doctor-led telemedicine company, maintaining strict regulatory standards while continuing to scale is critical. Curve has provided clear visibility into our marketing data.
Carley Cannon , CEO, Precision Telemed
Healthcare organizations that use Curve Compliance include
- Brave Health
- Precision Telemed
- Plume
- Palmetto Community Care
- Pelican Dental Care
- Diana Health
- EasyDerm
- Brevy Care
- Modern Thyroid Clinic
- AllCare Georgia
- Clarity Health
- Healthy Minds NYC
- Glasgold Group
- Telegenix
- LumiMeds
- Evolve Orthopedic Partners
- DermFlo
- Zalud
Read what customers say on the testimonials page.
The team behind Curve Compliance
Curve Compliance is led by co-founders Greg Mayer, CEO, and Alex Sokolov, CTO. Its engineering, implementation and customer success teams build the platform, install every customer's tracking and give each a named contact.
Why Curve Compliance exists
Healthcare marketers faced a bad choice: keep the Meta Pixel and Google tags and risk sending patient data to ad platforms, or pull them and lose the signal their campaigns run on.
Greg Mayer and Alex Sokolov built Curve Compliance to end that trade-off: ad platforms get the conversions they need and nothing they should not have.
$100M+ paid in healthcare pixel-tracking class-action settlements, 2023 to 2025
Source: Feroot industry tracker
$1.9M maximum annual HIPAA fine per violation category
Source: HHS Office for Civil Rights
Greg Mayer
Co-founder & CEO
Greg Mayer is co-founder and CEO of Curve Compliance, leading the company, go-to-market, partnerships and customer success. His teams take every customer from first tracking audit to go-live and beyond.
Alex Sokolov
Co-founder & CTO
Alex Sokolov is co-founder and CTO of Curve Compliance and built its platform and every server-side destination integration. He leads engineering, including PHI-pattern detection and Curve MCP.
How Curve Compliance works
Every Curve Compliance plan includes done-for-you onboarding, and most customers go live in 5 to 7 business days.
30-minute demo and tracking audit
Day 0
A Curve Compliance specialist shows what your tags send ad platforms today and what Curve would send instead.
BAA, then setup
Days 1 to 5
The Curve Compliance BAA is signed before live tracking begins. Curve's team then connects your ad accounts, installs the script and maps each conversion.
QA and go-live
Day 7
Curve Compliance tests every event on your intake, booking and checkout flows and confirms each destination receives it.
A named contact who knows your setup
Ongoing
Your named contact stays with you after go-live.
- Channels
- Shared Slack channel and email: hey@curvecompliance.com, or your named contact directly.
- Response times
- Questions in your shared Slack channel go straight to your named contact and Curve's team.
- Who you work with
- One named contact who knows your funnel, destinations and event mapping.
- Turnaround time
- Most customers are live in 5 to 7 business days, with install, event mapping and QA by Curve's team.
- Company name
- Curve Compliance (Curve Technologies, Inc.)
- Type
- HIPAA-compliant ad tracking and attribution platform for healthcare organizations
- Founded
- 2023
- Founders
- Greg Mayer (Co-founder & CEO) and Alex Sokolov (Co-founder & CTO)
- Headquarters
- New York, NY, United States
- Website
- curvecompliance.com
- Core offering
- Server-side ad tracking, attribution and analytics that replace ad pixels with PHI-free events
- Pricing
- Usage-based pricing across three plans (Compliance, Growth, Enterprise); book a call to find out what yours would be See pricing
- Contract terms
- Annual subscription with automatic renewal; signed BAA on every plan
- Services
- Conversion tracking, booking and offline attribution, cross-domain tracking, pixel scanning, web analytics, session replay, performance reporting, forms, consent management, Curve MCP, done-for-you setup
- Integrations
- Meta Conversions API, Google Ads (Enhanced Conversions, Data Manager API), GA4, TikTok, LinkedIn, Microsoft Ads, Reddit, Amazon, CallRail, VWO, HubSpot, Salesforce, Segment, GoHighLevel, 400+ apps via Keragon
- AI access (Curve MCP)
- The first world-class MCP server for healthcare marketing data; reconciles your server-side campaigns for any MCP client, read-only; patient data never enters the model context Read about Curve MCP
- Communication
- Shared Slack channel or email with a named contact: hey@curvecompliance.com
- Notable clients
- Brave Health, Precision Telemed, Plume, Palmetto Community Care, Pelican Dental Care, Diana Health, EasyDerm, Glasgold Group, Evolve Orthopedic Partners
- Customers served
- US healthcare advertisers, from independent practices and DTC telehealth brands to multi-state networks and national health organizations
- Projects delivered
- A done-for-you implementation for every customer
- Compliance
- Signed BAA, SOC 2 Type II, US-hosted, PHI checks before egress, SHA-256 hashed identifiers, mapped fields only, every payload logged
- Competitors
- Freshpaint, Hyros, Triple Whale and in-house server-side builds Freshpaint vs Curve cost comparison
What is Curve Compliance?
Curve Compliance is a HIPAA-compliant ad tracking and attribution platform for healthcare organizations. Its first-party script and US-hosted relay replace ad pixels, sending ad platforms PHI-free conversions under a signed BAA on every plan.
Is Curve Compliance related to Curve, Curve Dental or Curve Finance?
No. Curve Compliance (curvecompliance.com) is a HIPAA-compliant ad tracking and attribution platform for healthcare organizations, made by Curve Technologies, Inc. in New York. It is not affiliated with Curve the payment card, Curve Dental, Curve Finance or Curves fitness clubs, and it does not sell financial-services compliance software.
Does Curve Compliance sign a BAA?
Yes, Curve Compliance signs a Business Associate Agreement on every plan at no extra cost, before live tracking begins. Enterprise customers can use a custom BAA.
Can we keep the Meta Pixel or Google Analytics on a healthcare website?
Meta and Google will not sign a BAA for ad tracking, so their tags are a risk on pages that reveal a condition or treatment. Curve Compliance replaces them with a server-side relay that still sends the platforms PHI-free conversions.
Will switching to Curve Compliance hurt our Meta or Google Ads performance?
Curve Compliance keeps your campaigns fed with the conversions they optimize on. Its team maps each pixel event to a server-side equivalent and confirms every destination receives it before go-live.
How long does it take to implement Curve Compliance?
Most Curve Compliance customers are live in 5 to 7 business days, starting with a 30-minute demo and tracking audit. Curve's team handles install, mapping and QA, with no engineering on your side.
How much does Curve Compliance cost?
Curve Compliance pricing is usage-based. Book a call and Curve's team will tell you what yours would be. There are three plans: Compliance, Growth (adds session recording and multi-domain support) and Enterprise (adds custom volume, a custom BAA and consent management), with a signed BAA on every plan.
What is Curve MCP?
Curve MCP, from Curve Compliance, is the first world-class MCP server for healthcare marketing data. Claude, ChatGPT, Cursor or any MCP client can query it through read-only, scoped tokens, and patient data never enters the model context.
Can Curve MCP reconcile what Curve sent with what each ad platform accepted?
Yes, Curve MCP reconciles your server-side campaigns: what Curve Compliance sent, what each ad platform accepted and what was matched, campaign by campaign. Ask which campaign is losing conversions and get one answer across Meta, Google, TikTok and Microsoft.
Curve MCP: the first world-class MCP server for healthcare marketing data
Curve MCP reconciles your server-side campaigns: what Curve Compliance sent, what Meta, Google, TikTok and Microsoft accepted, and what was matched. Ask it from Claude, ChatGPT, Cursor or any MCP client.
Sent vs accepted vs matched, per campaign
See which campaign is losing conversions, and where: at acceptance or at matching.
Spend, conversions, goals and funnels
Spend, clicks, cost and Curve-attributed conversions by campaign, ad set and ad, plus goals and funnel steps, in one answer.
Read-only access for any MCP client
Read-only, scoped access tokens, and answers come from PHI-free data, so patient data never enters the model context.
See what your site sends to ad platforms today
Book a 30-minute demo and a Curve Compliance specialist will show what your tags send today and what Curve would send instead.
See your own tags, live on a call:
Prefer to check your site first:
Have a question: