Healthcare
Reach every patient.Keep every record safe.
Appointment reminders, member services and care follow-ups, run from one browser tab. Patient details stay masked on screen, every action is logged, and card details never reach a recording.
- Appointment reminders
- Member services
- Care follow-ups
- Test and prescription reminders
One call, three views
The same reminder call, seen by everyone who cares about it
Pick a view. The agent gets what they need to help, the patient gets a call they trust, and your compliance team gets a record they can stand behind.
The agent sees
Rosa Medina
+1 415 •••• 48
Reason for call
Reminder: appointment tomorrow at 10:30
Notes
Prefers morning calls. Date of birth hidden.
The agent sees only what the call needs. The phone number and sensitive fields stay masked.
An illustrative call. Names, numbers and the business are made up.
The safeguards
Six safeguards, in every plan
Said once, in plain words. Your IT team can open the technical detail on each one.
Patient details stay masked
Phone numbers, emails, names and the fields you choose are hidden on screen.
Technical detail
Phone, email, name and custom fields masked with a configurable digit count. Live updates to agents' screens carry no patient details.
Recordings are locked away
Every recording is encrypted, and every time someone plays one, it is logged.
Technical detail
AES-256-GCM at rest (SSE-KMS on S3), served through short-lived signed links. Every play and download is written to the audit log.
Card details never recorded
Agents pause the recording while a patient reads out a card number, then resume.
Technical detail
Recording is always, on demand or never, set per organisation and overridable per campaign. Pause and resume where your policy allows.
A log nobody can change
Every change and every access is written down, with who did it and when.
Technical detail
Append-only. Each sensitive action records the person, IP and browser, and the log itself hides phone numbers, emails, names and secrets.
Only the right people see it
Roles decide who sees what, and every account uses two-step sign-in.
Technical detail
Seven built-in roles with fine-grained permissions, TOTP two-step sign-in and account lockout. Every lookup is limited to your organisation; another organisation's record simply returns not found.
Kept only as long as you say
Recordings and records are removed automatically on your schedule.
Technical detail
Soft delete, then automatic purge on the retention period you set.
The paperwork
We sign a BAA on Enterprise agreements
TelVox Dial is built for HIPAA workloads. Your compliance team can review our security overview and controls under NDA before you sign anything.
- HIPAABuilt for it · BAA on Enterprise
- SOC 2 Type IIAudit in progress
- ISO 27001Audit in progress
- Security overviewShared under NDA

Proof from a live floor
Agrobhumi Agritech is not a healthcare BPO; they are an agritech business in India. What they do run is the engine on this page: predictive dialing, recorded and auditable calls, and rechurn bringing back the ones who did not answer. The same six agents now close four times the sales a day.
Questions
Healthcare, answered
Straight answers on HIPAA, patient data, recordings and the BAA.
TelVox is built for HIPAA workloads. PHI masking, an append-only audit trail, AES-256-GCM encryption at rest, strict access controls and soft-delete retention are engineered in, and we sign a BAA on Enterprise agreements. Note that HIPAA has no formal certification; compliance is a shared responsibility under the BAA.
See it protected
Bring your compliance team to the demo
We will show how patient details are protected, walk through the log and the BAA, then dial a sample reminder campaign live.