How we handle your patients' data.

Anna runs on voice infrastructure (Retell + Twilio) that supports HIPAA-compliant deployments with signed BAAs. Before we go live for your practice, we sign a Business Associate Agreement with you that covers exactly how PHI flows through our system, our breach notification obligations, and our subprocessors.

All call audio and transcripts are encrypted in transit (TLS 1.2+) and at rest (AES-256). Access is logged and restricted to the engineers who need it for operational reasons.

When a patient calls a number forwarded to Anna:

1. Twilio receives the call and sends the audio to Anna.
2. Speech-to-text converts what the caller says into text in real time.
3. Anna's reasoning layer (GPT-4o, deployed under a BAA) decides how to respond, using only your practice's configuration — your hours, services, insurances, and providers.
4. Anna's response is converted back to natural speech and sent to the caller.
5. If she books an appointment, we write it to your shared calendar and text the caller a confirmation.

Every call generates a transcript and metadata (length, outcome, booking confirmation) that we keep in encrypted storage for your review and audit purposes.

• No model training on patient calls. Your patients' audio and transcripts are never used to train or fine-tune any AI model — ours or anyone else's.
• No selling or sharing data. We don't sell, rent, or share patient data with anyone outside the subprocessors required to run the service (voice infrastructure, telephony).
• No third-party advertising. No ad networks, no analytics on call content. Period.
• No medical advice from Anna. Anna is configured to refuse to diagnose or give clinical advice. For clinical questions, she captures a callback and escalates to your team.

You get a full call log for every call Anna handles for your practice — caller (if disclosed), date/time, transcript, outcome, and any booking made. You can audit her behavior in real time.

If you ever ask us to delete a specific patient's records, we will do so within 30 days and provide written confirmation.

Within 30 days of ending the service, we return all your data (configuration, call logs, recordings) to you in a portable format and permanently delete it from our systems. You leave with everything; we keep nothing.