Kipu
EHR and practice management
EMR plus an admissions CRM. Kipu says its CRM turns website form inquiries into tasks; API access is by key, for Kipu clients and developers working with one.
EHR and practice management
Alleva and your treatment center website
EMR with CRM tools and a client and family portal. Alleva describes an open API; the web form route is not published.
- Read against the vendor's own pages
- BAA not stated
- Checked October 15, 2026
What it is
A behavioral health EMR with CRM tools for lead tracking and referrals, billing, a client and family portal, and compliance software.
How it connects to a website
- API on request
Alleva says its open API makes it easy to build custom integrations. We did not find public reference documentation.
- No public integration documented
For website forms, Alleva does not publish a method.
What KhanWork does with it
- Confirm with Alleva how website inquiries should reach its lead tracking before the form is built.
- Link the client and family portal from the pages families actually use, such as family program and alumni pages.
- Keep form answers and identifiers out of analytics.
Setup, as the vendor documents it
Alleva does not publish website integration or API setup steps. Both are arranged with Alleva for your account.
What to watch out for
Where patient details can slip out with Alleva, and what the vendor's own documents say to switch on, switch off or ask for.
An open API still needs documentation
Alleva says its API is open, but reference documentation is not public. Ask for it, and for who can be issued credentials, before anyone writes code against it.
Ask for the BAA by name
Alleva's master services agreement does not mention a BAA. Get one in writing before patient information flows through anything you connect.
Portal links are not marketing pages
Pages behind a login are where Google tells HIPAA-regulated entities not to place Google Analytics tags. Link to the portal; do not wrap it in your site's tracking.
Frequently asked questions
Alleva describes lead tracking and an open API, but it does not publish a web form method. We confirm the route with Alleva first and build the form to match.
Its public pages do not say. The master services agreement refers to protected health information but does not mention a Business Associate Agreement, so ask Alleva directly.
Yes, by link. Alleva offers a client and family portal, and we link it from the pages families use, without adding tracking to the portal itself.
Sources
- Alleva, homepage (opens in a new tab) (checked )
- Alleva, Master Services Agreement (opens in a new tab) (checked )
- Google, HIPAA and Google Analytics (opens in a new tab) (checked )
Not legal advice. This page reports what the vendor publishes. Nothing here implies a partnership with Alleva. Confirm plans and the BAA in writing with the vendor, and let your compliance lead or counsel decide what counts as PHI in your workflows. For the terms, see BAA, PHI, HIPAA and 42 CFR Part 2 in the glossary.
