A HIPAA-ready phone, text and fax system for medical practices

Who ZentryVoice Medical is for

ZentryVoice Medical is a HIPAA-ready cloud phone system for primary care, specialty, urgent care, behavioral health and multi-location medical groups with roughly 2 to 50 staff. It replaces the desk-phone closet, the fax machine and the staff cell phones patients text with one practice number that carries calls, HIPAA two-way SMS, T.38 eFax and transcribed voicemail, all covered by a Business Associate Agreement (BAA) countersigned at signup.

It is built for the people who answer the phone: a front desk juggling three lines, a nurse line that has to reach the right provider by schedule, and a manager who needs to know how many calls were missed today, not next month. Every extension also runs as a soft extension on desktop, iOS, Android and web, so a provider on call answers the practice line without giving out a personal number.

ZentryVoice works alongside your EHR rather than replacing it. Call summaries, text threads and fax PDFs live on one timeline per patient and export so they can be attached to the chart.

The compliance frame: HIPAA, the BAA and E911

Three rules shape a medical practice’s phone system. The HIPAA Privacy Rule governs how protected health information (PHI) may be used and disclosed. The HIPAA Security Rule (45 CFR Part 164, Subpart C) requires administrative, physical and technical safeguards for electronic PHI, and its transmission-security standard, 45 CFR 164.312(e)(1), requires “technical security measures to guard against unauthorized access to electronic protected health information that is being transmitted over an electronic communications network.” Encryption is an addressable specification there, which means you implement it or document why an equivalent measure is reasonable; it is not optional to ignore.

Second, a vendor that creates, receives, maintains or transmits PHI on your behalf is a business associate under HHS guidance, and the Privacy Rule only permits you to share PHI with it after you have satisfactory assurances in a written business associate contract. A phone system that holds voicemail transcripts, text threads, fax PDFs, recordings and AI call summaries is storing PHI, so it needs a BAA, not a promise. ZentryVoice countersigns the BAA at signup, before the first text or fax is sent.

Third, a multi-extension office phone is a multi-line telephone system (MLTS) under FCC rules. Kari’s Law requires that anyone can dial 911 directly, with no prefix, and that the system notifies a central point such as the front desk when a 911 call is placed. Section 506 of RAY BAUM’S Act requires that a dispatchable location (street address plus floor, suite or room) travels with the call. The rules apply to systems installed after February 16, 2020, with dispatchable-location deadlines of January 6, 2021 and January 6, 2022.

• checkEncryption in transit on every leg: SIP over TLS with SRTP media on the Telnyx carrier network, and TLS for texting, fax and the web app.
• checkBAA countersigned at signup and stored on your account, with SOC 2 Type II controls behind it.
• checkRole-based access per extension, passkeys for ZentryVoice operators, and an immutable per-practice audit log of every configuration change and support session.
• checkDirect 911 dialing, front-desk notification and a validated dispatchable address on every number, re-checked whenever a number or extension moves.
• checkPractice numbers registered for 10DLC through The Campaign Registry so appointment texts are delivered rather than filtered, and outbound calls carry STIR/SHAKEN A-attestation so you do not show as “Spam likely.”
• checkEncrypted call recording per line with a 90-day default retention policy you control, and texting that honors STOP and keeps consent records in line with CTIA’s Messaging Principles.

How it works at the front desk

A typical morning on ZentryVoice Medical looks like this.

1. 1A patient calls the practice numberThe call rings the front-desk ring group and the soft extensions you choose. If every line is busy it enters a queue with hold music instead of a fast busy.
2. 2Nobody can pick up in timeThe caller is offered a callback, and an automatic text goes out from the practice number: “We saw your call and will call you back shortly.” The call is tagged missed, then recovered when the patient books.
3. 3A nurse-line call arrivesSchedule-based routing sends it to the provider or nurse on duty, on a desk phone or a soft extension, and the AI summary and intent are written during the call.
4. 4A referral fax arrivesThe eFax is received over T.38, stored as a PDF, read and tagged (“Referral · patient name”) and routed to the right provider, with no paper tray to check.
5. 5A patient texts to rescheduleThe message lands on the practice number, in that patient’s timeline, visible to the whole front desk, not on one employee’s personal cell.
6. 6Voicemail after hoursMessages are transcribed and prioritized; the manager skims an urgent refill request at 8 a.m. instead of dialing in to listen to all of them.
7. 7End of dayThe live dashboard shows answered, missed and recovered calls per line and location, and the audit log shows who changed what.

ZentryVoice vs a regular medical office phone setup

Most practices run a desk-phone system plus a fax machine, a texting app and staff cell phones. These are the differences that matter for a medical office.

What missed calls cost a medical practice (estimates)

There is no peer-reviewed national study of missed calls in medical practices; the figures that circulate come from vendor call-tracking samples and should be read as estimates. Those samples consistently report that 20–40% of calls to small practices go unanswered during business hours, and that most callers who reach voicemail hang up without leaving a message. A practice taking 150 calls a day that misses a quarter of them is losing roughly 35 conversations daily, some of them new patients who call the next practice on the list.

The useful exercise is to measure your own number. ZentryVoice’s dashboard shows answered, missed and recovered calls per line from day one, so the estimate becomes a figure you can act on.

errorIndustry missed-call and revenue-loss statistics are vendor estimates, not regulatory findings. Use your own call log, which ZentryVoice reports live, before making staffing decisions.

Pricing for medical practices

ZentryVoice Medical is $20 per seat per month. Each seat is an extension with voicemail transcription, AI call summaries, live reporting and soft extensions on desktop, iOS, Android and web. HIPAA SMS texting is $15 per month per practice and Compliance eFax is $15 per month per practice. Desk phones are $119 each, arrive pre-provisioned, and are optional; many practices start on soft extensions and add phones for the front desk.

Support is a flat monthly plan by practice size. Technical Support (priority human line, about a 2-minute wait) is $15, $20 or $30 per month for practices of up to 4, 8 or 16 extensions. Technical Support + Advanced Warranty, which adds next-day replacement of desk phones, is $30, $35 or $40. The BAA, SOC 2 Type II controls, the audit log, E911 and STIR/SHAKEN are included at every size; compliance is not an add-on.

• check30-day free trial, month-to-month, cancel anytime, free port-out of your numbers.
• checkSoft extensions live in about 15 minutes; desk phones in 2–3 business days; number ports complete in 5–10 business days with a temporary number forwarding from minute one.
• checkVoice core availability target of 99.999% on the Telnyx carrier network.

Switching a medical practice without downtime

You keep your numbers. ZentryVoice files the port with your current carrier, tracks it and switches over with no downtime; a temporary number forwards calls from the moment you sign up. Desk phones ship pre-mapped to each extension through Grandstream GDMS zero-touch provisioning, so staff plug them into power and network and they ring. If you leave, you take your numbers with you at no charge and your PHI is returned or destroyed as the BAA requires.