Morasel for Clinics

How Morasel handles patient information

Your patients' data is a serious responsibility, and we treat it honestly, without overclaiming. Here's what we actually do: role-based access, encryption in transit and at rest, consent and opt-out honored — with your clinic remaining the responsible data controller.

Honesty over slogans

It's easy for a marketing page to promise everything. We'd rather be accurate. Morasel is a communication and scheduling platform that stores communication and booking data — not clinical records. We protect that data with access controls and encryption, and we honor patient consent and opt-out. But the legal responsibility for patient data stays with your clinic as the data controller under its local laws. We don't claim certifications we don't hold.

What we do

The controls that protect patient data

  • Role-based access

    Each team member sees only what their role needs. Roles and permissions control who can view and reply to patient conversations.

  • Encryption

    Data is encrypted in transit and at rest, protecting it both on the wire and on the servers.

  • Consent handling

    Patient consent and opt-out are honored; anyone who asks to stop no longer receives broadcast messages.

  • Data ownership & responsibility

    Your clinic remains the controller of, and responsible for, its patient data under the laws that apply to it; Morasel is a processor serving the clinic.

Who can see patient conversations

A shared inbox doesn't mean everyone sees everything. Roles decide who can access which conversations, so each member sees only what their job needs, and team activity stays reviewable.

See the security page

  • Roles and permissions decide access to conversations
  • Encryption in transit and at rest
  • Consent and opt-out are always honored
  • For more detail, see the security page

An important note

Morasel is a communication and scheduling platform. It is not a medical device, does not provide medical advice or diagnosis, and makes no HIPAA-compliance claim. Clinics remain responsible for how they collect consent and handle patient information under the laws that apply to them.

Frequently asked questions

Is my data encrypted?

Yes. Data is encrypted in transit and at rest, protecting it both on the wire between devices and on the servers.

Who can see patient conversations?

Only the people your clinic grants access to. Roles and permissions control who can view which conversations, so each member sees only what their role needs.

Is Morasel HIPAA compliant?

No. Morasel is a communication and scheduling platform, not a medical device, and makes no HIPAA-compliance claim. Your clinic remains responsible for compliance with the laws that apply to it.

Who owns the data?

Your clinic. It remains the controller of, and responsible for, its patient data under its local laws, while Morasel is a processor serving the clinic.

Is consent handled?

Yes. Patient consent and opt-out are honored; anyone who asks to stop no longer receives broadcast messages.

Your patients' data, protected and in your control

14-day free trial. No card required. Turn on WhatsApp communication with role-based access, encryption and consent honored.