Privacy here isn't a feature — it's the foundation: isolation between clinics, encryption, audit, daily backups, and strict control over who processes medical information and how.
Each clinic's data lives in an isolated dataset, accessible strictly by token. Every request is scoped to your clinic only, and the isolation is continuously checked by automated guards.
Data in transit travels over TLS. Sensitive fields (names, contacts, clinical notes) are encrypted in the database. A clinic's integration credentials are stored encrypted.
The infrastructure runs in Microsoft's certified cloud. Data is hosted in the Israel region, on a world-class platform with its own data-center certifications.
Sign-in by personal staff PIN codes with role-based permissions. Key actions are written to a secured audit log with an integrity chain.
A daily encrypted backup. At any time, the clinic can export its entire database (Excel / ZIP) and request the permanent erasure of all data.
The voice agent stores neither audio nor transcripts of conversations — the system keeps call metadata (number, time, duration) and whatever the agent files at the patient's request, such as a message for the doctor or a refill request.
The platform runs two voice assistants — an internal one (for the physician) and a phone one (for patients). Speech recognition and synthesis run on an enterprise-grade speech platform, and telephony on a licensed global carrier.
Under our agreements, voice and text data is passed through transiently and is not stored by the provider, nor is it used to train models (zero-data-retention terms). Written confirmation is provided on request; the current provider list is on the Sub-processors page.
Speech · zero data retentionTelephony · licensed carrierNo training on your data
Medical information is not shared with third parties, except for trusted infrastructure providers — each under its own Data Processing Agreement (DPA) or Business Associate Agreement (BAA):
Cloud hostingSpeech synthesis/recognitionTelephonyWhatsApp delivery
The named, always-current list of providers is published on the Sub-processors page.
The platform is a productivity tool, not a medical device. It does not make diagnoses or take clinical decisions: the final decision always rests with the physician, and it is the physician's note that is the record of truth.
The architecture is built on a "privacy first" principle and is aligned with the requirements of GDPR and the HIPAA approach. The full legal documents — Privacy Policy, Terms of Use, and EULA — are available on the website.
We provide the BAA (HIPAA), the Data Processing Agreement DPA (GDPR), and the speech provider's confirmation of non-retention to clinics and their IT departments upon written request.
Request documents →