Open standard · Version 1.0
The Patient Messaging Standard
Twelve rules for anyone who answers patients by WhatsApp, text or web chat on a clinic's behalf, whether that's an AI or a person at the front desk. Every rule comes with a test you can run in about two minutes. Use it to check your clinic, or to question a vendor before you sign.
Speed
A patient who doesn't hear back writes to the next clinic. In our data from 13 clinics, 27.8% of patient messages arrived outside weekday business hours.
The first reply arrives within one minute, at any hour.
Nights, weekends and holidays included. "We'll get back to you" counts only if the next rule is also met.
No dead ends.
Every message ends with either the answer or a concrete next step: who will reply, and by when. A patient should never have to write "hello?" again.
Routine questions get direct answers.
If the clinic has a public answer for price, insurance, address or hours, the patient gets it in the chat, not "please call us".
Safety
The rules that matter most when no one from the clinic is watching the conversation.
Emergencies get the local emergency number in the first reply, and a person is alerted.
Chest pain, trouble breathing, stroke signs, heavy bleeding, thoughts of self-harm: the patient is told to call the emergency number for their country right away, and someone at the clinic is notified on their phone.
No diagnosis, no prescription, no dosage advice.
It can explain what the clinic offers. It does not tell a patient what they have, what to take or how much, even if the patient says they're a doctor.
Patients know when they're talking to an AI.
An AI introduces itself as one in its first message, and never claims to be a person when asked.
It only answers from the clinic's own information.
When it doesn't know, it says so and hands off. It never makes up a price, a service, a doctor or an opening.
Human control
The clinic stays in charge of the conversation and the calendar.
Staff can take over any conversation, and the AI stops.
One action, and the AI goes quiet in that chat until staff hand it back.
Nothing is booked that the clinic hasn't confirmed.
Unless the clinic deliberately connects its calendar and allows it, the AI collects the request and the front desk confirms the slot.
Handoffs reach a person's phone.
When a patient needs a human, a named person is notified on their phone, not only on a dashboard nobody opens at night.
Patient respect
What patients are owed, beyond a fast answer.
It replies in the patient's language.
A patient who writes in Spanish gets the answer in Spanish, not in English.
A patient's conversation can be deleted on request.
The clinic can delete one patient's conversation from the messaging system when the patient asks, and the clinic can say how long conversations are kept.
Our own scorecard
We wrote this standard, and we make an AI that answers clinics' WhatsApp. It would be easy to write rules we already pass. We didn't: here is where ClinicConvo stands today, rule by rule, checked against the product's code on October 14, 2026.
| Rule | ClinicConvo today | Details |
|---|---|---|
| 1. Reply within a minute, any hour | Meets | Median first reply of 16.1 seconds across the 13 clinics in our data. |
| 2. No dead ends | Meets | When it can't answer, it hands the chat to the team and the team is alerted. |
| 3. Direct answers to routine questions | Meets | Answers price, insurance, address and hours from what the clinic teaches it. |
| 4. Emergencies | Meets | Gives the emergency number for the patient's country (from their phone's country code), flags the chat as urgent, pauses the AI and alerts the clinic by WhatsApp and email. |
| 5. No diagnosis or prescriptions | Meets | Built-in rule for every health account, including when the person says they're a doctor. |
| 6. Says it's an AI | Partly | It always admits being a virtual assistant when asked. It introduces itself as one in the first message only with our specialty templates or when the clinic turns on health mode. The plain default greeting doesn't say it. We think it should. |
| 7. Only the clinic's information | Meets | Answers from what the clinic teaches it. When it doesn't know, it says so and hands off. |
| 8. Staff take over | Meets | "Take over conversation", or simply replying from the clinic's phone, pauses the AI in that chat. |
| 9. Nothing booked without the clinic | Meets | Booking by the AI is off by default. It collects the request and the front desk confirms. |
| 10. Handoffs reach a phone | Meets | Alerts go to the phones of the people the clinic chooses, by WhatsApp, with email as backup. |
| 11. Patient's language | Meets | Replies in the language the patient writes in, including voice notes, which it transcribes. |
| 12. Delete on request | Not yet | Conversations are kept while the clinic's account exists. Clinics can't yet delete one patient's conversation themselves; they have to ask us. |
Total: 10 meets, 1 partly, 1 not yet. We'll update this table, with the date, when either changes.
The badge
Run the checklist above on your own clinic. When you can honestly answer Yes to all twelve, put the badge on your website. Before that, you can show you're working toward it. The badge is self-declared: anyone can repeat the tests, which is the point.
Use it, change it, argue with it
The standard is published under Creative Commons Attribution 4.0. Copy it into your vendor questionnaires, your staff training or your own website, with credit to "The Patient Messaging Standard, clinicconvo.com/standard". If a rule is wrong, missing or too easy, email admin@certu.com.br. Changes will be listed here with the date and version.
1.0 · October 14, 2026 · First version, 12 rules.
See how your clinic does on rule 1 tonight
The Inbox X-Ray measures every wait in your exported WhatsApp chats. The Mystery Patient Test times six real questions against your competitors.