Security & compliance

Secure, compliant messaging: what we automate and what stays yours

Appointment Reminder App is HIPAA Compliant and sends through AvanceZone's messaging gateway on the official WhatsApp Business Platform. Each item below says what the app does automatically and what your organisation manages; the full table is on the compliance responsibilities page.

In short: Appointment Reminder App is HIPAA Compliant and keeps messages, call records and consent logs encrypted in transit and at rest. It records opt-ins and opt-outs per channel, honours STOP replies, blocks promotional SMS to DND numbers, enforces calling hours and stops payment follow-ups for opted-out contacts. DLT and Meta registrations remain the customer's own.
HIPAA CompliantData hosted in IndiaTLS 1.2+ in transit, AES-256 at restConsent log and STOP handlingRole-based access and audit log

DLT registration

Automated: stores the DLT template ID and sender ID with each SMS template and flags SMS templates without one. You manage: your DLT entity (PE ID), sender ID and template registration on your DLT operator's portal.

DND (NCPR) handling

Automated: contacts flagged DND never receive promotional SMS broadcasts; service messages still go through. You manage: classifying each template as service or promotional correctly. Live NCPR registry scrubbing is connected per customer on request.

Consent and opt-out

Automated: opt-ins and opt-outs logged per contact and channel with time and source; STOP/START replies handled; opted-out contacts skipped by broadcasts, API sends, payment ladders and AI calls. You manage: collecting consent with a clear purpose and recording offline consent.

WhatsApp templates and Meta policy

Automated: template status tracked per template; utility and marketing rates applied. You manage: template wording and category, and messaging only people who opted in.

Calling hours

Automated: AI calls only within the calling window set on your voice number (9 am–9 pm by default); ladder calls outside it wait for the next window. You manage: the window and which calls are placed.

Recordings and retention

Automated: recordings and transcripts kept 180 days by default, encrypted. You manage: asking support to change the period or delete a patient's data on request.

How we build and run Appointment Reminder App

  • Isolation. Every record carries your workspace ID and every query is scoped to it at the data layer, so one customer can never read another's data.
  • Encryption. TLS 1.2+ in transit; encrypted disks at rest; passwords hashed with Argon2id; API keys stored only as hashes.
  • Access control. Roles (owner, admin, staff, viewer) with per-module permissions, session hardening and login throttling with temporary lockout after repeated failed attempts. Two-factor authentication is on the roadmap.
  • Audit trail. Every create, edit and delete is logged with who, when, from where and what changed.
  • Backups. Nightly encrypted backups retained for 30 days; point-in-time restore on request.
  • Data ownership. Export everything as CSV or JSON any time. If you leave, we delete your data within 30 days of your request.
  • Read more. See our privacy policy, terms of service, the full Appointment Reminder App feature list and pricing.
  • Responsible disclosure. Found a vulnerability? Email info@radiatus.com and we will respond within 2 business days.

Security questions

Are reminder call recordings stored?

Where call recording is enabled on your voice number, recordings and transcripts are stored encrypted for 180 days by default. Ask support to change the period or to delete a patient's recordings, so you can honour DPDP Act 2023 erasure requests.

Is it safe to send appointment details on WhatsApp?

Yes, when the patient has opted in. Appointment Reminder App uses the official WhatsApp Business Platform, which encrypts messages in transit, and we recommend sending only the minimum details: name, time, place and preparation notes. Keep diagnoses and reports out of reminder text.

Who can see patient conversations?

Only users in your workspace with the right role. Appointment Reminder App supports owner, admin, staff and viewer roles with per-module permissions, logs every create, edit and delete in an audit trail, and scopes every database query to your workspace, so no other customer can read your patient data.

What happens when a patient replies STOP?

The opt-out is recorded in the consent log for all channels, the patient gets a one-line confirmation, and broadcasts, API messages and payment-ladder follow-ups to that patient stop. Your staff can still answer if the patient writes in again. Replying START subscribes the patient again.

Start with reminders. Grow into the whole conversation.

Send your first WhatsApp or SMS reminder template this week, then add the inbox, voice AI and payment recovery when you need them. 14-day free trial with ₹200 of wallet credit, no card. Prefer a call? Request a demo and our team will call you.