The clinic — not the vendor — answers to regulators. So before choosing any phone AI, these are the questions to ask. Here are our answers, in writing.
It reads and writes scheduling data only: slots, appointments, patient name and phone. It has no access to medical records — not by policy, by architecture: the operations that could read clinical history are simply not in the list the assistant can call. Patient identity is verified with a second identifier before anything is read out loud, and a phone number shared by a family never reveals who is a patient.
Pain, symptoms, medication, results: the assistant stops and transfers to your staff. It never gives medical advice, never performs triage, never prioritizes by severity. That boundary is hard-coded and identical in every plan.
We operate as your business associate and sign a BAA. Our voice, transcription and hosting chain is being finalized for HIPAA-covered workloads: before you commit, we tell you in writing exactly which links of the chain have a signed BAA and which are pending. If any link can't sign, we don't sell you the US flow — simple as that.
We work under each country's data-protection framework — Mexico's LFPDPPP, Colombia's Ley 1581 and Decreto 1377, Chile's Ley 21.719, Argentina's Ley 25.326, Peru's Ley 29733 among others — with a data-processing agreement adapted to your jurisdiction and the international-transfer clauses your law requires.
Processing runs entirely in the EU: telephony, transcription, language model, voice synthesis, database and backups in the same region. Signed art. 28 processor agreement, published sub-processor list, and the assistant identifies itself as AI at the start of every call as required by Regulation (EU) 2024/1689, art. 50.
Passwords stored with a slow one-way hash and per-user salt. Clinic credentials encrypted with AES-256-GCM. Full audit log — every access, every change, with date and IP. Accounts lock after five failed attempts. Patient phone numbers are stored masked in call records. And your data is yours: leave, and it's deleted.
Ask us for the processor agreement and the sub-processor list — we'd rather you read them first.
Talk to us on WhatsApp