Why Qaro

Built for the specific problems of outpatient practices. Not adapted from a hospital tool.

Most HIPAA messaging tools are either built for hospital systems or are single-practice patient texting tools. Neither fits what you actually need.

The difference

What you get with Qaro

A room for each location's day
The people working at each site today, in one conversation — floating providers in each room they work in.
Photos and PDFs kept off staff phones
Viewed from Qaro each time, never saved to the camera roll or the phone's storage.
Who's working where, each day
Built into the same app: usual days, days off and covers, per location.
Priced for independent practices
Per location plus per provider, published below. No enterprise sales cycle.
Your whole team included
Nurses, MAs, front desk and schedulers are covered by the location fee — only providers are counted.
HIPAA BAA included, no extra step
Part of every Qaro agreement.
English and Spanish
On the web and in the iOS and Android apps.
HIPAA compliance

Compliant from the moment you log in

We built compliance in at the infrastructure level — not as a settings page you have to configure. Every deployment runs on Microsoft Azure Central US under a HIPAA Business Associate Agreement.

AES-256 encryption at rest — messages and attached files encrypted before they are stored. Keys held in Azure Key Vault.
Microsoft HIPAA BAA — included under Microsoft's online services terms. No separate agreement to chase.
Append-only audit log — every message sent and read, every file opened, and every sign-in recorded. Export CSV for any compliance review.
Enforced sign-in — every staff member, every device, no exceptions. The app locks after 15 minutes away and unlocks with Face ID, a fingerprint, or the phone's passcode.

What "HIPAA compliant" actually means here

A lot of tools claim HIPAA compliance and mean they'll sign a BAA if you ask. We mean something more specific:

Push notifications never contain PHI — the alert says "open the app," not the patient's name
PHI is detected automatically before encryption — staff don't need to remember to flag it
Photos and documents are never saved to the phone, and a photo's location data is removed before it is stored
Audit log entries are append-only — the app itself cannot modify or delete them
Messages and files kept for three years, then deleted automatically — backed by an append-only audit log
Pricing

Simple. Predictable. Everything included, priced by size.

We charge per location plus per provider. Providers (physicians, NPs, PAs) are billed per provider. Nurses, MAs, front desk and schedulers are included in the location fee.

Everything included

Every practice, every location

Secure messaging, direct and group
A room for each location's day
Photos & documents
Who's working today, per location
Admin console and dashboard
BAA + append-only audit log
iOS, Android and web
English and Spanish
Practice size Per location
/ month		 Per provider
/ month
1–2 locations $199 $99
3–9 locations $179 $89
10+ locations $149 $79

The rate for your practice's size applies to every location and provider. Nurses, MAs, front desk and schedulers are included in the location fee.

Pricing shown is indicative for early access partners. Final pricing confirmed at onboarding. Annual prepay discount available on all plans.

Questions before you apply?

We're happy to walk through the product with your team or answer specific questions about your setup before you commit to anything.

Request Early Access Send Us a Question