If a patient reads off their credit card number over the phone to pay a copay, is that handled securely?

For Dental Practices

This is a case where we'd steer you away from having the AI receptionist take the card number directly, even though it can technically hold a conversation about payment. Collecting and storing full card numbers over a phone call brings PCI-DSS obligations into play, the security standard that governs anyone who handles cardholder data, and most dental practices already meet that standard through their existing payment processor, whether that's built into their PMS payment integration, a standalone terminal, or a patient portal from their clearinghouse. The practical setup we recommend: let Voksha handle the scheduling, insurance intake, and general conversation, and if a patient wants to pay a copay or an outstanding balance over the phone, have it route them to a callback from staff or a secure payment link (text or email) generated by your existing payment system rather than having the AI capture and store the card number itself. This keeps your PCI scope exactly where it already is, with your existing payment processor, instead of adding a new system that has to be independently PCI-compliant. Some practices configure Voksha to text a secure payment link automatically when a patient mentions wanting to pay a balance, which gets the job done without anyone reading a card number aloud to an AI or a human. If you're unsure how your current setup should be configured, this is worth raising directly during onboarding rather than assuming it's handled by default.