Patient privacy is built into every call

Zaya is an AI medical receptionist built by physicians for clinics. Our work touches protected health information on every call, and we treat it that way.

We sign a BAA with every practice

Before Zaya handles a single patient call, we sign a Business Associate Agreement with your practice. That agreement sets out our responsibilities under HIPAA for the patient information we handle on your behalf.

HIPAA safeguards

We apply HIPAA administrative, physical, and technical safeguards to the patient information Zaya handles. We'll walk through them with your compliance lead during onboarding.

Verification before any chart action

Zaya verifies each caller by name and date of birth before it books, reschedules, or cancels an appointment or reads schedule details.

Where patient information goes

Your EMR: appointments, plus a telephone encounter for every call
Your team: messages to your EMR, email, or a protected messaging system, depending on how you set it up
Your patients: SMS appointment confirmations
Your staff, live: calls that need a person are transferred to your team

You choose these destinations during setup, and we configure Zaya to match your workflow.

Your team stays in control

Every call is documented in your EMR as a telephone encounter, so your staff can review what Zaya did. You decide which calls Zaya handles, when it answers (overflow, after hours, or 24/7/365), and when it transfers to a person.