Book a call Health systems ask about patient data before they ask about features. We build sites that put the privacy answers up front, in words that are correct.
Companies that trusted us with their website
A healthtech website is read by the clinical team that wants the product and by the IT, security and legal teams that must approve it. If you handle US patient health data, the site should say “HIPAA compliant, BAA available”, never “HIPAA certified”: there is no official HIPAA certification. Customers also look for a trust page, SOC 2 status with a date, and a plain answer on whether AI models see or learn from patient data. In our study of YC homepages (10 Oct 2026), healthcare is one of the few groups where Webflow leads: 74 of 306 sites, against 66 on Next.js. Pentaclay is a B2B website design agency for AI companies. We write, design and build these sites.
Can I see work like ours?
Yes. See our recent B2B work.
How long does a full website take?
6 weeks, from the first call to launch.
When do I see the price?
Scope, price and launch date in writing within 3 business days.
Which platforms do you build in?
Framer, Webflow, Next.js or another platform.
And how we’d fix each one on your website.
A health system asked for our BAA before they would start the pilot.
If it’s true, your site says “HIPAA compliant, BAA available” on a trust page, next to your SOC 2 status and its date.
Our site says “HIPAA certified”. Then we learned that certification doesn’t exist.
There is no official HIPAA certification. We use the right words, and your lawyer or compliance lead confirms them.
IT wants to know if the AI learns from patient data, and the answer isn’t on our site.
We state whether models see or learn from patient data, which AI providers are involved, and every vendor that touches it.
Clinicians, IT and the budget holder all read the same homepage.
Each audience gets its own clear next step, so clinical, IT and budget teams each find their answers.
Privacy and security answers come before features.
What patient data you touch, where it is stored, and how long you keep it.
“HIPAA compliant, BAA available”, if that is true.
Or “in progress”, with an expected month.
Whether models see or learn from patient data, and which providers are involved.
Every vendor that touches patient data.
The clinical and IT systems it connects to, by name.
Providers or health systems a reviewer can check.
SSO, user roles and audit logs for every login that touches patient data.
Our most recent work for B2B teams.
Clubs see the scale of the model before they read a word
An AI model of football is hard to picture. So the first screen leads with one number: 1.1 billion on-pitch events. The team publishes blog posts, media and glossary terms without a developer.
Families and schools each find their own way in
Families and schools wanted different things from one site. Families download a free app. Schools book a demo. A “Choose your path” choice on the first screen sends each one the right way.
Universities, brands and athletes each get a page made for them
One platform, three audiences: universities, brands and athletes. We built their design: a first screen that cycles through all three, a page for each, and a news room the team runs.
“Working with Kazi was great, and we’re very pleased with the outcome.”
Nima NejadChief Creative Officer, NOCAP SportsInvestors and borrowers each get their own first step
One lender, two audiences with opposite goals. Investors put money in. Borrowers take it out. So the first screen gives each one a button of their own, and every deal gets a page the team edits itself.
Tick what’s true for your site today.
0 of 6
Start with the basics
Customers may leave before they find what they came for. The Free Website Audit shows what to fix first.
Get a free website audit2 to 3 weeks, start to launch
One page that explains what you sell and books the call.
6 weeks, start to launch
Every page written, designed and built for your team to edit.
We give you the price and the date before we design anything.
What you get
We write the copy first, then design every page.
What you get
Built so your team can edit it without a developer.
What you get
Live on the date in your contract.
What you get
Everything is handed over to you.
What you get
After the call, you get the scope, price and launch date in writing within 3 business days.
“Working with Kazi was great, and we’re very pleased with the outcome.”
Nima NejadChief Creative Officer, NOCAP Sports
“Was always willing to assist to go above and beyond.”
“The experience was truly outstanding. … Every task was completed on time…”
Verified client on ContraRead the reviews From our own research on YC companies.
74 of 306
YC healthcare companies (2021 to 2026) whose homepage runs on Webflow. 66 run Next.js, 22 WordPress, 19 Framer.
Source: Pentaclay study of 3,791 YC startup homepages (2,945 answered), 10 Oct 2026
23 of 47
Of the healthcare companies with 16 or more people, the ones on Webflow. 5 run Next.js.
Source: Pentaclay study of 3,791 YC startup homepages (2,945 answered), 10 Oct 2026
19 of 114
YC AI company homepages that mention HIPAA.
Source: Pentaclay audit of 114 YC AI company homepages, 13 Oct 2026
No. There is no official HIPAA certification. If it is true, write “HIPAA compliant, BAA available”.
Only companies that handle US patient health data for providers, insurers or their partners. If you never touch US patient health data, HIPAA does not apply to you.
HIPAA status and BAA availability, SOC 2 status with a date, how patient data is handled, your subprocessors, and whether AI models see the data. Only what is true today.
GDPR applies to personal data of people in the EU and UK. There is no GDPR certificate. Customers ask for your DPA, your subprocessor list and where data is stored.
A full website usually takes 6 weeks, and we can work faster if your date needs it. A landing page takes 2 to 3 weeks. The date goes into the contract.
What teams in this industry book us for.
If customers need a demo just to understand what you sell, your website isn’t doing its job.
Kazi Mohammed ErfanFounder
Loading the calendar…
Don’t want to fill in the form? Book a call directly Prefer to write? Send a message instead
Pentaclay is a B2B website design agency for AI companies that sell to enterprises. We write, design and build marketing websites in Framer, Webflow and Next.js, and stay to help after launch. Pentaclay LLC is registered in New Mexico, USA; our team works from Dhaka, Bangladesh, with calls until 12:30pm US Eastern. Founded in 2023 by Kazi Mohammed Erfan, who brings 12 years of design experience.
