• Deletes website chat messages automatically after a fixed retention window; a short AI-written summary stays with the lead.
• The AI never gives medical advice and tells patients who describe an emergency to call emergency services.What your clinic still owns• Toran is not HIPAA-compliant and we do not sign Business Associate Agreements (BAAs).
• Train staff to redirect any PHI shared in WhatsApp back to your patient portal rather than responding inline.
• Use a dedicated tele-health platform (Doxy.me, etc.) for tele-consultation - not Toran or raw WhatsApp.