Agreement gate
No PHI is enabled until BAAs with every required service provider and the healthcare customer are executed.
Calls to Customers can prepare healthcare call, scheduling, queue, transfer, and messaging workflows. The standard service must not receive protected health information. A healthcare deployment is activated only after its legal agreements, vendors, hosting, data flow, and operational safeguards pass a separate review.
No PHI is enabled until BAAs with every required service provider and the healthcare customer are executed.
Prompts and forms collect only the minimum information needed for the approved workflow.
TLS, authenticated webhooks, scoped credentials, and least-privilege access are required.
The opening script discloses recording, collects consent, and supports pause or redaction rules.
Access, changes, incidents, retention periods, and secure deletion are documented and reviewable.
SMS and email avoid PHI unless the exact channel and content have been approved for the customer.