Dograh
Telehealth

Visit calls that verify before saying anything

Dograh is the self-hostable voice agent platform with an open-source workflow builder. Run the calls around every virtual visit on your own servers, with the agent naming only the practice until the patient passes your check.

6,000+GitHub starsBSD-2open source$0platform fee, self-hostedAny systemconnects to the tools you use
01 / How it works

Greet, verify, then disclose

Example
A patient picks uppractice namedidentity checkedvisit time shared
01 · Greeting

The opening names the practice and nothing else

Greeting Textplays word for word before any check

A clinician's name can reveal as much as a diagnosis, so the first line leaves it out.

→ Switch off Allow Greeting Interruption if it carries a notice

02 · Verify

Your endpoint decides who is verified

HTTP API toolasks your system during the call

The agent collects date of birth plus one more item on file, and your endpoint replies pass or fail. Only a pass unlocks the visit time.

→ Build and test this endpoint first

03 · Tech check

Device checks from the patient portal

Voice widgeta live voice call inside your web page

A patient who starts the call from your portal is already testing that browser's microphone, with no phone carrier in the path.

→ Keep the visit type out of tech checks

02 / Your systems

What the agent reads, writes and runs on

Reads during the call
Pass or fail from your verify endpointVisit time and clinician, after a passPractice answers from the Knowledge Base

Pass a patient reference at call start, never the visit type

Writes back
Join link resend requests to your messaging providerDevice and browser answers for staffCallback requests from web calls

Tools send a visit reference, so the link never reaches a log file

Runs on
Your own serversYour cloud account, under its BAATwilio, Telnyx, Plivo, Cloudonix or Asterisk ARI for nurse-line transfers

The nurse answers before the patient joins

03 / Before go-live

Check these before a patient hears the agent

  1. 911 line on an emergency pathwayPut the fixed line in Transition Speech so it plays word for word, then test it with many phrasings.
  2. Telemetry switched offSet ENABLE_TELEMETRY=false and remove POSTHOG_API_KEY before the first visit call.
  3. Every hosted model provider on your BAA listHosted speech and language models receive the audio. Open-weight models on your servers keep it in-house.
  4. Reminder calls kept inside the exemptionEach lasts about a minute, a patient gets at most one a day and three a week, and balances never come up.
  5. Retention schedule set on storageRecordings, transcripts and logs stay only as long as your own schedule says.
04 / Why own it

Patient audio where you control access

Every copy in storage you run

Self-hosted, recordings, transcripts and call records land in your own object storage and Postgres.

No BAA with Dograh needed

The platform never receives your call data when it runs on your servers.

Open-weight models keep audio home

Run speech and language models on your own hardware, and no model vendor hears the visit call.

Nurse line reached first

Transfer Call dials the nurse first, and a Twilio introduction can stay at the patient's first name and topic.

05 / Dograh vs hosted platforms

What changes when the platform sits with the provider

What you getDograhhosted per-minute voice platforms
Self-hosted inside your own environment✓✕
No per-minute platform fee on your own servers✓✕
Open-source code your compliance team can review✓✕
06 / Guides

Healthcare privacy, call by call

Complete guideVoice AI in Healthcare: Consent, PHI, and Privacy by DesignRead →Use CaseAI Voice Agents for Hospitals and Health Systems in CanadaHow a Canadian hospital or health authority can bring in an AI voice agent through its privacy impact assessment and supplier agreement: where call data sits, who can train on it, which hospital calls an agent can take, and how to size the line.Use CaseAI Voice Agents for Telehealth in Australia: Privacy Act BasicsHow Australian GP practices and telehealth services can run booking and call-back calls with an AI voice agent under the Privacy Act: which APPs apply, why live audio sent offshore is an APP 8 question, the automated-decision rule from 10 December 2026 and a call design with 000.Use CaseAI Voice Agents for Telehealth in Canada: Provincial Privacy RulesHow Canadian clinics, family doctors and nurse practitioners can run virtual care phone calls with an AI voice agent: which provincial privacy law applies, what AI scribe guidance means for phone agents, bilingual call design and keeping call data in Canada.Use CaseAI Voice Agents for Telehealth in the UK: A GP Practice GuideHow a UK GP practice or telehealth provider can add an AI voice agent beside its framework phone system: the lawful basis under UK GDPR, telling patients it is an AI, a route to reception, NHS clinical safety and DSPT checks, and keeping call data in the UK.TechnicalHIPAA-Compliant Voice AI for Medical Billing CallsHow to run patient billing and balance calls with a voice agent under HIPAA and the TCPA: verify the patient before any amount is spoken, get consent for outbound balance calls, keep voicemails plain and take payment by link or payment line, never by voice.TechnicalHIPAA-Compliant Voice AI for Dental Clinics: Front Desk PrivacyHow a dental practice runs reception, recall and balance calls with a voice agent under HIPAA: what each call type may say before and after verification, where recall calls turn into marketing, and how a small practice keeps every copy of a call on one server.TechnicalHIPAA-Compliant Voice AI for Telehealth: The Calls Around the VisitHow to run telehealth booking, reminder and tech-check calls with a voice agent under HIPAA: what each call may say before and after verification, how the join link stays off the call, where each copy is stored and who else hears the call.TechnicalWhich Parts of a Voice AI Stack Need a BAAA layer-by-layer guide to business associate agreements for healthcare voice AI: the carrier, the platform, speech, language and voice models, hosting, traces and tools, across hosted and self-hosted setups.TechnicalVerifying Patient Identity Before a Voice Agent Shares PHIHow to build patient identity verification into a healthcare voice agent: keep the record out of the agent, check answers against your own system, and handle failed checks and family callers.TechnicalPatient Consent for Automated Healthcare CallsThe consent rules for automated and AI-voice patient calls: HIPAA authorization, TCPA consent and the healthcare exemption, recording consent, opt-outs, and how to build each limit into a voice agent.TechnicalWhat Counts as PHI on a Voice Agent CallWhich parts of a voice agent call count as PHI, from the live audio and the caller's number to recordings, transcripts, logs and traces, and where each copy lives in a self-hosted install.TechnicalHIPAA-Compliant Voice AI: What Self-Hosting ChangesWhat self-hosting changes for HIPAA-compliant voice AI: which call data stays on your servers, which vendors still hear the call and need a BAA, and which safeguards stay with your team.
Questions
Does the agent read the join link aloud?+

No. Your telehealth or messaging system sends it. If a patient asks again, the agent asks your messaging provider to resend it.

Can a tech-check call expose health information?+

It can if the visit type is read aloud, since that reveals why the patient is seen. The agent sticks to the device and browser.

Do reminder calls need written consent?+

Reminder calls to mobiles can generally rest on the TCPA healthcare exemption, within its limits. Confirm your setup with counsel.

What happens if a patient describes an emergency?+

A fixed line on an emergency pathway tells them to call 911 now. Test that pathway with many phrasings before go-live.

Do I need a BAA with Dograh?+

Not when you self-host, because the platform never receives your call data. Check your carrier, cloud and hosted model providers.

Does a web call skip the phone carrier?+

Yes. The voice widget runs over WebRTC, so no carrier is in the path, though hosted models still receive the audio.

Build the verify endpoint first.

Self-host in one command, or start on Dograh Cloud.

$ curl … start_docker.sh && ./start_docker.sh