MetaMeta Tech Provider

Security and data protection with Wazzy

At Wazzy we protect every conversation and every piece of patient data that passes through it, using the official WhatsApp Business API and infrastructure built to run in line with the GDPR.

AES-256GCM encryption for messages and credentials
99.9%Uptime on cloud infrastructure
EUServers inside the European Union, GDPR legal basis
24/7Active monitoring for anomalies and intrusions

The assurance of working to the official standard

Wazzy is an official Meta Tech Provider

Unlike tools that rely on unofficial methods, which are prone to being blocked, Wazzy operates as a Meta Tech Provider and uses the official WhatsApp Business API. That means working under Meta’s own infrastructure and policies, and keeping the risk of a block as low as any provider can while depending on someone else’s platform.

The assurance of working to Meta’s official standard, to protect the identity and the number of your business.

MetaMeta Tech ProviderOfficially accredited to build on the WhatsApp Business API.

Privacy and GDPR compliance

Your information, protected by European law

The data Wazzy handles directly is hosted on servers inside the European Union. Wazzy applies technical and organisational measures to protect that information, and does not use your patients’ data to train public artificial intelligence models.

Infrastructure built to protect your clinic’s information and help you work in line with European data protection law.

Infrastructure and encryption

Hardened infrastructure for a service that does not stop

The technical architecture behind Wazzy is built for high availability, speed and protection of your information.

Technology built to keep your clinic running: up when you need it, and protected while it is.

Encryption

AES-256-GCM

We encrypt conversation messages and sensitive credentials, such as WhatsApp and Google Calendar tokens, with AES-256-GCM. Public traffic to Wazzy goes over HTTPS/TLS.

Availability

High availability servers

Cloud infrastructure with uptime above 99.9%.

Backups

Automated backups

Daily, redundant backups of the whole setup, so your schedule and your data can be recovered whatever happens.

Monitoring

Watched 24/7

Active monitoring that spots anomalies or attempted intrusions and limits the damage.

Performance

Minimal latency

Wazzy replies on WhatsApp almost instantly.

Ownership and control of your data

Your data, under your clinic’s control

At Wazzy we provide the technology, but your information is yours alone. We built the platform to be open about everything, so you are never locked in.

Stay in charge of your own business, on a platform built around being open with you and leaving your data free to move.

  • The data is yours

    The contacts, conversation histories and appointment data the assistant produces belong to your clinic, not to Wazzy.

  • Export

    You can export your data whenever you want. You are not tied to the platform.

  • Access control

    You decide who on your team gets into the panel, with tiered permissions, so sensitive information is only seen by the people you allow.

  • Conversation audit

    You can look back at how Wazzy answered in any conversation and adjust its settings from there. On top of that, every action inside the panel is tied to the person on your team who took it.

FAQs

Frequently asked questions about security at Wazzy

What people usually ask us about data, encryption and the official WhatsApp API.

Wazzy is built to operate within the General Data Protection Regulation and the European law that applies to it.

As a general rule the clinic is the data controller and Wazzy is the processor when it handles data on the clinic’s behalf.

Whether compliance actually holds also depends on how each clinic sets up and uses the service, and on its own legal obligations.

As a general rule Wazzy acts as the data processor when it handles personal data on the clinic’s behalf.

The relationship is set out in the corresponding terms and agreements.

Yes. The relationship between the clinic and Wazzy includes the contractual documents needed to govern the processing of personal data on the clinic’s behalf.

Yes. The main infrastructure Wazzy uses to store your data sits in the European Union.

Wazzy also relies on third party services, such as WhatsApp and Meta, which run under their own terms and their own infrastructure.

Yes. Wazzy uses encryption to protect information, both while it travels and for certain sensitive data at rest and in backups.

Wazzy applies technical and organisational measures aimed at protecting the personal and clinical information it processes, including access controls, traceability, backups and monitoring.

These measures are there to reduce risk and protect information, although no technology can promise zero risk.

No. Wazzy does not use clinic or patient data to train public artificial intelligence models.

Yes. The Wazzy WhatsApp assistant works through the WhatsApp Business Platform, Meta’s official infrastructure for businesses. Wazzy operates as a Meta Tech Provider.

Yes. Wazzy operates as a Meta Tech Provider.

Yes. From the very start of the first exchange, Wazzy tells the patient they are talking to an artificial intelligence assistant.

It says so plainly, for example by introducing itself as the clinic’s AI assistant, which is what the transparency obligations of the European AI Act require.

MetaMeta Tech Provider

Build on ground you can trust

With Wazzy you get what AI can do, backed by serious infrastructure and an official standard.

No lock-inGuided setupNo technical know-how needed