# Healthtech Website Design Agency > Websites for healthtech and AI health companies that sell to providers and health systems. Privacy and HIPAA answers up front, in words that are correct. Source: https://pentaclay.com/industries/healthtech # Website design for healthtech and AI health companies Health systems ask about patient data before they ask about features. We build sites that put the privacy answers up front, in words that are correct. [Book a call](https://cal.com/pentaclay/discovery-call) [**5.0** Hired 18 times on Contra](https://contra.com/pentaclay/reviews) [See all work](https://pentaclay.com/work) Companies that trusted us with their website ## Healthtech websites, in short Updated 17 Oct 2026 A healthtech website is read by the clinical team that wants the product and by the IT, security and legal teams that must approve it. If you handle US patient health data, the site should say “HIPAA compliant, BAA available”, never “HIPAA certified”: there is no official HIPAA certification. Customers also look for a trust page, SOC 2 status with a date, and a plain answer on whether AI models see or learn from patient data. In our study of YC homepages (10 Oct 2026), healthcare is one of the few groups where Webflow leads: 74 of 306 sites, against 66 on Next.js. Pentaclay is a B2B website design agency for AI companies. We write, design and build these sites. Can I see work like ours? Yes. See our recent B2B work. How long does a full website take? 6 weeks, from the first call to launch. When do I see the price? Scope, price and launch date in writing within 3 business days. Which platforms do you build in? Framer, Webflow, Next.js or another platform. ## What we hear on the first call And how we’d fix each one on your website. **Kazi Mohammed Erfan** Founder, Pentaclay 2. You A health system asked for our BAA before they would start the pilot. 3. If it’s true, your site says “HIPAA compliant, BAA available” on a trust page, next to your SOC 2 status and its date. 4. - A trust page - HIPAA status and BAA - SOC 2 with a date 5. You Our site says “HIPAA certified”. Then we learned that certification doesn’t exist. 6. There is no official HIPAA certification. We use the right words, and your lawyer or compliance lead confirms them. 7. - “HIPAA compliant”, not “certified” - Wording your team confirms - Privacy answers up front 8. You IT wants to know if the AI learns from patient data, and the answer isn’t on our site. 9. We state whether models see or learn from patient data, which AI providers are involved, and every vendor that touches it. 10. - The AI data answer - AI providers by name - A subprocessor list 11. You Clinicians, IT and the budget holder all read the same homepage. 12. Each audience gets its own clear next step, so clinical, IT and budget teams each find their answers. 13. - A next step for each audience - Systems it works with, by name - Providers who already use it [Tell Erfan about your site… Book a call](https://cal.com/pentaclay/discovery-call) ## What enterprise customers check on a healthtech site Privacy and security answers come before features. ### Privacy answers, up front What patient data you touch, where it is stored, and how long you keep it. ### HIPAA status, in the right words “HIPAA compliant, BAA available”, if that is true. ### SOC 2 with a date Or “in progress”, with an expected month. ### The AI data answer Whether models see or learn from patient data, and which providers are involved. ### Subprocessors Every vendor that touches patient data. ### The systems it works with The clinical and IT systems it connects to, by name. ### Who already uses it Providers or health systems a reviewer can check. ### Access controls SSO, user roles and audit logs for every login that touches patient data. ## B2B websites we’ve launched Our most recent work for B2B teams. ### Machine Football AI - B2B - Sports AI 2026 Clubs see the scale of the model before they read a word An AI model of football is hard to picture. So the first screen leads with one number: 1.1 billion on-pitch events. The team publishes blog posts, media and glossary terms without a developer. [Read the case study](https://pentaclay.com/work/machine-football) - **1.1B** on-pitch events modeled - **18** in-house AI models ### Fronterra - B2C + B2B - AI learning 2026 Families and schools each find their own way in Families and schools wanted different things from one site. Families download a free app. Schools book a demo. A “Choose your path” choice on the first screen sends each one the right way. [Read the case study](https://pentaclay.com/work/fronterra) - **6 days** from kickoff to a live site, January 2026 - **2** sites, Fronterra and its maker Axon Park ### NOCAP Sports - $2.5M seed, 2021 - B2B - College sports 2025–2026 Universities, brands and athletes each get a page made for them One platform, three audiences: universities, brands and athletes. We built their design: a first screen that cycles through all three, a page for each, and a news room the team runs. [Read the case study](https://pentaclay.com/work/nocap-sports) ### Freehold Wealth - B2B - Property finance 2026 Investors and borrowers each get their own first step One lender, two audiences with opposite goals. Investors put money in. Borrowers take it out. So the first screen gives each one a button of their own, and every deal gets a page the team edits itself. [Read the case study](https://pentaclay.com/work/freehold-wealth) - **2** first steps on the first screen: invest or borrow - **4** deal pages in a CMS the team edits itself [See all work](https://pentaclay.com/work) ## Does your site answer these? Tick what’s true for your site today. **0** of 6 Start with the basics Customers may leave before they find what they came for. The Free Website Audit shows what to fix first. [Get a free website audit](https://pentaclay.com/free-website-audit) - Does the site say what patient data you touch, and where it is stored? - Does your HIPAA wording say “compliant” and “BAA available”, not “certified”? - Is SOC 2 status shown with a date? - Does the site say whether AI models learn from patient data? - Is a trust or security page linked from the footer? - Does each audience (clinical, IT, customer) have a clear next step? ## Start with one page, or the whole site ### Landing page 2 to 3 weeks, start to launch One page that explains what you sell and books the call. - What you do, in one clear message - Copywriting, done by us - Pictures of your product - Designed for desktop, tablet and phone - Built on the platform your team will edit - Booking form and tracking from day one - Every account handed over - A recorded walkthrough and 30 days of free fixes ### Full website Most booked 6 weeks, start to launch Every page written, designed and built for your team to edit. - An audit of your site and competitors - What you do, in one clear message - Logo, colors and type tidied up - Sitemap and page plan, then wireframes - Copywriting for every page - Every page for desktop, tablet and phone - Pictures of your product - A CMS your team publishes with - Old links redirected, SEO basics on every page - Every account handed over, and 30 days of free fixes [Book a call](https://cal.com/pentaclay/discovery-call) [See pricing](https://pentaclay.com/pricing) ## How a project runs. From the first call to launch in 6 weeks ### Call and scope We give you the price and the date before we design anything. What you get - Written scope, price and launch date - Notes on your current site - How rival sites explain the same thing - Who reads your site, and what each one needs ### Messaging and design We write the copy first, then design every page. What you get - What you do, in plain language - Sitemap and page plan - Wireframes - Every page for desktop, tablet and phone ### Development Built so your team can edit it without a developer. What you get - Built on the platform your team will edit - A design system - CMS templates - Forms and tracking ### Check and launch Live on the date in your contract. What you get - Design QA - Every old link redirected - SEO basics on every page - Readable by Google and AI search ### Handover Everything is handed over to you. What you get - A recorded walkthrough - Every account handed over - Your Figma files and images - 30 days of free fixes [Book a call](https://cal.com/pentaclay/discovery-call) After the call, you get the scope, price and launch date in writing within 3 business days. ## Proof, not promises. What our clients say **140+** clients in the US, UK, EU and Australia **12 years** of design experience [5.0 ★★★★★ From 7 reviews on Contra. Hired 18 times. > “The experience was truly outstanding. … Every task was completed on time…” **Verified client on Contra** Read the reviews](https://contra.com/pentaclay/reviews) **225+** banks and fintechs use software our founder designed ## What health sites run on From our own research on YC companies. Checked 17 Oct 2026 74 of 306 YC healthcare companies (2021 to 2026) whose homepage runs on Webflow. 66 run Next.js, 22 WordPress, 19 Framer. Source: [Pentaclay study of 3,791 YC startup homepages (2,945 answered), 10 Oct 2026](https://pentaclay.com/research/yc-startup-websites) 23 of 47 Of the healthcare companies with 16 or more people, the ones on Webflow. 5 run Next.js. Source: [Pentaclay study of 3,791 YC startup homepages (2,945 answered), 10 Oct 2026](https://pentaclay.com/research/yc-startup-websites) 19 of 114 YC AI company homepages that mention HIPAA. Source: [Pentaclay audit of 114 YC AI company homepages, 13 Oct 2026](https://pentaclay.com/research/yc-startup-websites) ## Is Pentaclay a fit? ### This is for you if - You sell healthtech or AI health software to providers, health systems, insurers or their partners. - You have a pilot, a launch or a raise coming. - You want marketing to edit the site without a developer. ### Not for you if - You need advice on what you can legally claim. Your lawyer or compliance lead confirms that. We build the pages. - You are a clinic or practice that needs a local patient site. ## Questions about healthtech websites ### Can’t find your answer? Book a call and let’s talk. [Book a call](https://cal.com/pentaclay/discovery-call) Or email us at [contact@pentaclay.com](mailto:contact@pentaclay.com) Can we say we are HIPAA certified? No. There is no official HIPAA certification. If it is true, write “HIPAA compliant, BAA available”. Does every healthtech company need HIPAA pages? Only companies that handle US patient health data for providers, insurers or their partners. If you never touch US patient health data, HIPAA does not apply to you. What does a healthtech trust page need? HIPAA status and BAA availability, SOC 2 status with a date, how patient data is handled, your subprocessors, and whether AI models see the data. Only what is true today. We also sell in Europe. What changes? GDPR applies to personal data of people in the EU and UK. There is no GDPR certificate. Customers ask for your DPA, your subprocessor list and where data is stored. How long does it take? A full website usually takes 6 weeks, and we can work faster if your date needs it. A landing page takes 2 to 3 weeks. The date goes into the contract. ## Website services for healthtech companies What teams in this industry book us for. - [Enterprise website development Sites built for enterprise customers](https://pentaclay.com/services/enterprise-website-design) - [Webflow development Webflow sites your marketing team runs](https://pentaclay.com/services/webflow-development) - [Website redesign Make your site match what you sell](https://pentaclay.com/services/website-redesign) - [Website design A new site, from copywriting to launch](https://pentaclay.com/services/b2b-website-design) ### More from us Learn more - [B2B website cost](https://pentaclay.com/guides/b2b-website-cost) - [Project timeline](https://pentaclay.com/guides/website-project-timeline) - [Agency vs freelancer](https://pentaclay.com/comparison/agency-vs-freelancer) - [Framer vs Webflow](https://pentaclay.com/comparison/framer-vs-webflow) - [Templates vs custom](https://pentaclay.com/comparison/framer-templates-vs-custom-development) Company - [Pricing](https://pentaclay.com/pricing) - [How a project runs](https://pentaclay.com/process) - [Our work](https://pentaclay.com/work) - [About Pentaclay](https://pentaclay.com/about) - [FAQ](https://pentaclay.com/faq) Industries - [Biotech and life sciences](https://pentaclay.com/industries/biotech) - [Fintech](https://pentaclay.com/industries/fintech) - [AI security](https://pentaclay.com/industries/ai-security) - [All industries](https://pentaclay.com/industries) - [AI agents](https://pentaclay.com/industries/ai-agents) Start smaller Not ready for a new website? Start with a free audit, or a ready-made template. [Free Website Audit](https://pentaclay.com/free-website-audit) [Website templates](https://pentaclay.com/templates) ## Your business grew up. Your website should too If customers need a demo just to understand what you sell, your website isn’t doing its job. - We sign an NDA on request. - You own the site, the code and every account once it’s paid. - Your first call is with Erfan, the founder. **Kazi Mohammed Erfan** Founder Don’t want to fill in the form? [Book a call directly](https://cal.com/pentaclay/discovery-call) ## Not sure? Ask AI about Pentaclay ### Pentaclay, in short Updated 17 Oct 2026 Pentaclay is a B2B website design agency for AI companies that sell to enterprises. We write, design and build marketing websites in Framer, Webflow and Next.js, and stay to help after launch. Pentaclay LLC is registered in New Mexico, USA; our team works from Dhaka, Bangladesh, with calls until 12:30pm US Eastern. Founded in 2023 by Kazi Mohammed Erfan, who brings 12 years of design experience.