No — Go4whatsup does not sign HIPAA Business Associate Agreements (BAAs). We are not a covered entity for US-regulated PHI. Hospitals and clinics in the US that handle PHI should route clinical data through their HIPAA-covered EMR and use WhatsApp only for non-PHI communication (generic reminders, logistics, directions). Outside the US, we publish a DPA and support regional compliance (India DPDP, UAE PDPL, GDPR).

Yes in most jurisdictions outside the US, provided the patient has consented and the report is addressed to the registered patient. We recommend encrypting the PDF with a patient-known password (DOB or phone last-4) for defense-in-depth. In the US, route lab reports through a HIPAA-covered portal instead.

Three-layer stack: 24h-before reminder with confirm/reschedule buttons, 2h-before reminder with directions and parking info, and a front-desk escalation if the confirm button isn't tapped by T-4h. Combined, this takes no-shows from 25–35% down to 10–15%.

Yes. A CTWA ad or a "Book now" QR on your reception desk opens a thread; the bot collects specialty, date preference, insurance panel; shows available slots; confirms. Works against Calendly, Cal.com, Practo, or a custom EMR via API.

Set up an auto-reply with a clear message: "For medical emergencies, call [ambulance number]. This channel is monitored during clinic hours only." Plus keyword-trigger escalation so words like "chest pain" or "bleeding" alert a clinical team member regardless of time.

WhatsApp messages are end-to-end encrypted in transit between devices. Meta, however, is the platform operator — it processes metadata. For clinical data, combine WhatsApp with sensible patterns: avoid sending full diagnosis in clear text, use IDs rather than names for sensitive topics, password-protect PDF reports, and keep the EMR as the source of truth.

Yes — either via native HL7 FHIR (for modern EMRs) or REST API. Go4whatsup subscribes to appointment-booked, lab-ready, discharge-complete events from your EMR and fires WhatsApp flows in response. Common EMRs wire up in 1–3 integration calls.

Ja. Wir erfüllen die DSGVO-Anforderungen an Einwilligung, Zweckbindung, Datenminimierung und Betroffenenrechte. Ein Auftragsverarbeitungsvertrag (AVV) ist verfügbar; EU-Datenresidenz ist Standard. Für Werbekommunikation beachten wir zusätzlich das TTDSG.

Yes. PRO is ≈ €125/mo, invoiced in EUR with reverse-charge VAT where your VAT-ID applies. Annual contracts with 5% discount available.

Yes — we've supported German customers through Works Council approval for employee-facing tooling. Documentation package (AVV, ROPA, data-flow, TOM, access-control matrix) is available at Enterprise.