Security and trust for every patient call
Zaya is an AI medical receptionist built by physicians. Every call can touch protected health information, so privacy is part of the product, not an add-on. We sign a BAA with every practice and your team stays in control.
Built on trust
What we commit to on every call Zaya answers for your clinic.
We sign a BAA
Before Zaya handles patient calls for your clinic, we sign a Business Associate Agreement that sets out our HIPAA responsibilities.
HIPAA safeguards
We apply HIPAA administrative, physical, and technical safeguards to the patient information Zaya handles.
Verify before any chart action
Zaya confirms each caller by name and date of birth before it books, reschedules, cancels, or reads schedule details.
Every call documented
Each call is logged as a telephone encounter in your EMR, so staff can review exactly what happened.
You control access and routing
You choose when Zaya answers, which visit types it books, where messages go, and when it transfers to a person.
Keep your number
Patients keep calling the number they already know. Zaya answers overflow, after hours, or 24/7/365.
What we sign. What we don't claim.
Clear commitments, so your compliance team knows exactly where we stand.
What we sign and do
• Business Associate Agreement with every practice
• HIPAA administrative, physical, and technical safeguards
• Name + date of birth verification before chart actions
• Onboarding review with your compliance lead
HIPAA & BAA →What we don't claim
• No SOC 2 claims
• No specific encryption products listed on this page
• No chart action without caller verification
• No changes to where patients call you
Review your checklist →Bring your compliance checklist
Book a walkthrough and we will go through your requirements and the BAA before go-live.
Security FAQ
Do you sign a BAA?
Yes. We sign a Business Associate Agreement with every practice before go-live.
Does Zaya sign a BAA?
We apply HIPAA safeguards to patient information Zaya handles and sign a BAA with every practice.
How does Zaya verify patients?
By name and date of birth before any booking, reschedule, cancel, or schedule lookup.
Where do call notes go?
Every call is logged as a telephone encounter in your EMR. Messages can also go to your EMR, email, or a protected messaging system.
Can staff still take over a call?
Yes. Zaya transfers calls live to the staff member you designate when a person is needed.
Do you claim SOC 2?
No. We do not make SOC 2 claims. If your compliance team needs a deeper review, book a demo and we will go through your checklist and the BAA.
Who do we talk to about compliance questions?
Book a demo and we will walk through your requirements and the BAA with the Zaya Health team.
Hear it for yourself
Call the Zaya demo line any time, or book a walkthrough to review security and the BAA with us.
The Zaya Health team
AI voice receptionist for medical offices.
NAVIGATE
SOLUTIONS
SPECIALTIES
CONNECT
Transform your Practice
See how Zaya Health can help your clinic today.
Zaya Health supports administrative communication and scheduling. It does not provide medical advice.
© 2026 Zaya Health. All rights reserved.