If a patient reads off their credit card number over the phone to pay a copay, is that handled securely?

For Dental Practices

This is a case where we'd steer you away from having the AI receptionist take the card number directly, even though it can technically hold a conversation about payment. Collecting and storing full card numbers over a phone call brings PCI-DSS obligations into play, the security standard that governs anyone who handles cardholder data, and most dental practices already meet that standard through their existing payment processor, whether that's built into their PMS payment integration, a standalone terminal, or a patient portal from their clearinghouse. The practical setup we recommend: let Voksha handle the scheduling, insurance intake, and general conversation, and if a patient wants to pay a copay or an outstanding balance over the phone, have it take their details and flag the call so your staff can call back and take the payment through your existing payment system. This keeps your PCI scope exactly where it already is, with your existing payment processor, instead of adding a new system to your payment setup. Taking payments and texting callers (for example, sending a payment link) are Enterprise-only features, so on Starter and Premium the staff callback is the route, and even on Enterprise many practices prefer to keep payments with the processor they already trust. If you're unsure how your current setup should be configured, this is worth raising directly during onboarding rather than assuming it's handled by default.