New: Live Streaming SDK beta — 10,000 free minutes every month on every plan. Read the announcement →
Ship chat, voice & video on infrastructure built for real-time.
Build on a reliable, high-quality real-time engagement platform that delivers messages in under 100 ms worldwide and keeps voice and video crystal-clear and lag-free — with an admin console and HIPAA-ready security included.
From Niftonic — the studio behind 10+ production apps for US clients
⭐ 5.0 on Clutch⚛ 8+ years React Native🔒 HIPAA BAA available🇺🇸 US-hosted
⚛ React Native◆ Flutter iOS · Swift🤖 Android · KotlinJS Web⚙ REST API🔒 HIPAA BAA🇪🇺 GDPR🔔 FCM + APNs🎥 Video calls🎙 Voice notes📡 Live streaming🛡 AI moderation🌐 Translation📊 Admin console
Real-time network
Messages that arrive in 84 milliseconds. Anywhere.
Chatzic runs on a global edge network with intelligent routing. Messages, presence and call signaling take the fastest path to every device — and keep flowing on 3G, in elevators and across network switches.
Edge delivery — connections terminate at the nearest region and fan out server-side.
Offline-first SDK — queue, retry and sync so nothing is lost when the network drops.
Resilient media — adaptive bitrate keeps calls stable at up to 60% packet loss.
Complete in-app messaging — 60+ features, zero infrastructure.
1-on-1, groups up to 1,000 and live chatrooms for 20,000. Photos, video, PDFs, voice notes, reactions, threads, mentions, polls, translation and moderation — with a prebuilt UIKit you can theme in one prop.
UIKit or Core SDK — drop in finished screens or build your own UI on the same API.
Push that just works — FCM and APNs delivery, retries and PHI-safe previews handled.
Offline sync, receipts, presence — the details users notice, on by default.
Gorgeous! Send me the itinerary when you can✓✓ Read
PDFAustin-itinerary.pdf640 KB
0:08
+Message…
Voice & video calling Beta
From a chat thread to a face-to-face call in one tap.
HD video up to 25 participants, group voice up to 50, screen sharing, picture-in-picture and cloud recording — all on the same client and user system as your chat, so a call button is a one-day feature, not a quarter.
Ringing push — native full-screen incoming-call UI on iOS and Android.
AI noise suppression — keyboards, traffic and cafés filtered out.
Call events in chat — missed and ended calls land in the thread automatically.
Host-and-audience streaming with co-hosts, unlimited viewers and a 20,000-member live chatroom under every stream. Reactions, pinned messages, slow mode and moderation come from the chat you already have.
Bring viewers on stage — invite anyone from the audience as a co-host mid-stream.
RTMP in and out — ingest from OBS, relay to YouTube or Twitch.
From $0.29 per 1,000 viewer-minutes — with 10,000 free minutes a month.
Short interactive demos rendered live from the real UIKit — watch a group chat fill up, a voice note land, and a call start from a thread.
0:00 / 0:14
Group chat with attachmentsReactions, a PDF, a voice note and read receipts — in 14 seconds.
0:00 / 0:12
Telehealth 1-on-1 (HIPAA)A patient–provider thread with images, auto-translation and encrypted delivery.
0:00 / 0:10
Call from a chat threadTap the call icon → ringing → connected video with PiP. Beta.
Admin Console
Your clients get a dashboard, not a support ticket.
Every Chatzic app ships with a web console. Clients see how many users signed up, which chats are active, message volume, flagged content and push health — without asking a developer.
Chatzic is being rolled out first inside Niftonic's own client portfolio — telehealth, social communities, marketplaces, food tech and events — before general availability. Case studies will be published here with each launch.
🩺 Therapy & telehealth
Secure 1-on-1 messaging and video visits for a US therapy platform — the reason HIPAA mode exists.
🎲 Social & communities
Interest-based groups, events and moderation tooling for a US social app with growing communities.
🍳 Food & events
Host–guest chat, booking threads and live updates for food-tech and event products.
Start free today.
1,000 MAU, every core feature, the Admin Console and 10,000 call minutes a month. No credit card.
Pick your stack below. Every SDK shares the same concepts, events and data model, so a team shipping on React Native today can add a native iOS or Flutter client tomorrow without re-learning anything.
Create your app
Sign up, create an application in the Admin Console and copy your App ID.
Install the SDK
Add the package for your platform (and the UIKit if you want prebuilt screens).
Connect a user
Initialize with your App ID and connect with a user ID — server-minted tokens in production.
Create a channel & send
Create a direct or group channel, send your first message and listen for incoming ones.
Go live
Turn on push, moderation rules, webhooks and HIPAA mode from the console — no redeploy.
Prefer we do it?
Our team integrates Chatzic into existing apps as a fixed-scope service — SDK wiring, push certificates, UI theming and QA on real devices.
Works in React, Next.js, Vue and plain JS. Same user sessions as your mobile apps. Web quickstart →
Terminal
# Mint a user token from your backend
curl -X POST https://api.chatzic.com/v1/tokens \
-H "Authorization: Bearer $CHATZIC_SECRET" \
-d '{"userId":"alex","expiresIn":3600}'# Send a system message into a channel
curl -X POST https://api.chatzic.com/v1/channels/ch_42/messages \
-H "Authorization: Bearer $CHATZIC_SECRET" \
-d '{"sender":"system","text":"Your order #1042 has shipped 📦"}'# Export last 30 days (JSON)
curl -X POST https://api.chatzic.com/v1/export \
-H "Authorization: Bearer $CHATZIC_SECRET" \
-d '{"from":"2026-10-09","format":"json"}'
Node, Laravel, Django, Rails, Go — anything that speaks HTTPS. Signed webhooks for events. API reference →
Every chat plan includes unlimited messages, every core feature, the UIKit and the Admin Console. You only pay for monthly active users — people who actually connect to chat in a calendar month.
Save ~15% annually
Free
For prototypes, demos and getting to your first message.
MAU = a unique user who connects to Chatzic in a calendar month (multi-device counts once). Unlimited messages on every plan. Annual billing is prepaid; upgrades apply immediately and are prorated, downgrades apply next cycle. Peak concurrent connections included at 10% of your MAU tier. Prices in USD, excluding tax.
Voice, video & live streaming
Pay per minute. 10,000 free every month.
Real-time media is billed by participant-minute on top of any chat plan (including Free). Every account gets 10,000 free minutes a month across voice, video and streaming — enough to launch.
Voice Calling Beta
$0.79 /1,000 participant-min
1-on-1 and group voice up to 50
AI noise suppression included
Ringing push (VoIP / FCM)
Call quality stats
Recording +$0.49 /1,000 min
Included: 10K free min
Video Calling Beta
$2.99 /1,000 participant-min
HD 720p · up to 25 participants
Full HD 1080p: $5.99 /1,000 min
Screen share at video rate
Picture-in-picture, grid layouts
Recording +$0.99 /1,000 min
Live Streaming Beta
$0.29 /1,000 viewer-min
Standard latency (3–5s) audience
Low-latency interactive: $0.99 /1,000
Hosts & co-hosts: $2.99 /1,000 min
RTMP ingest / relay: $1.49 /1,000 min
Live chatroom included with Chat plan
Item
Unit
Price
Notes
Free allowance
per month
10,000 min
Pooled across voice, video & live — every plan
Voice (1-on-1 / group)
1,000 participant-min
$0.79
Up to 50 participants
Video HD 720p
1,000 participant-min
$2.99
Up to 25 participants
Video Full HD 1080p
1,000 participant-min
$5.99
Opt-in per call
Live — audience, standard
1,000 viewer-min
$0.29
3–5 s latency, unlimited viewers
Live — audience, interactive
1,000 viewer-min
$0.99
Sub-second, for auctions & Q&A
Live — host / co-host
1,000 host-min
$2.99
On-stage participants
RTMP ingest / relay
1,000 min
$1.49
OBS in, YouTube/Twitch out
Cloud recording
1,000 min
$0.49 voice · $0.99 video
30-day storage included
Translation (chat)
1,000 characters
$0.015
Pro+ · first 500K chars/mo free
AI image moderation
1,000 images
$1.20
Pro+ · first 20K/mo free
A participant-minute is one person connected to a call for one minute (a 10-minute call with 4 people = 40 minutes). Volume discounts from 1M minutes/month. Beta pricing — we'll give 60 days' notice before any change.
Support plans
Support that scales with your launch.
Every plan includes a support tier. Upgrade support independently when a launch, migration or compliance audit needs more hands.
Community
Included
Free plan · Discord, GitHub discussions and docs. Best-effort replies from the team.
Standard
Included
Starter plan · Email support, 2-business-day first response, bug-fix SLAs.
Priority
Included · or $199/mo
Pro plan · 8-hour first response, in-console chat with engineers, integration review call at launch.
Any unique user who connects to Chatzic through the SDK at least once in a calendar month. A user on three devices counts once. Registered users who never connect that month don't count.
Is there really a free plan?
Yes — 1,000 MAU, every core feature, the Admin Console, no credit card and no time limit. When you grow past it, upgrade in the console and keep all your data.
What happens if I go over my MAU limit?
Nothing breaks. Extra users are billed at $0.04/MAU on Starter and Pro. We email you before overages kick in, and you can set a hard cap in the console if you'd rather block than pay.
How is HIPAA handled?
Pro and Enterprise include HIPAA mode (stricter retention, PHI-safe push previews, console access logging) and a signed Business Associate Agreement. Email hello@chatzic.com to receive the BAA.
Do voice and video cost extra?
They're billed per participant-minute on top of your chat plan, with 10,000 free minutes every month on every plan — including Free. Most early-stage apps never exceed the free allowance.
Can I migrate from Sendbird, Agora or ZEGOCLOUD?
Yes. We provide import tooling for users, channels and history via the Platform API, and our team can run a zero-downtime migration for you using a dual-write cutover.
Is there a message limit?
No. Every plan includes unlimited messages — pricing scales only with MAU, so a highly engaged community doesn't punish you.
How do I cancel?
From the console, anytime. Monthly plans stop at the end of the billing cycle; you can export your full message history first. No lock-in, no exit calls.
Every Chatzic application comes with a web console. Your clients (or your own ops team) see users, active chats, message volume, moderation flags and push health in one place — with role-based access so support staff never see what they shouldn't.
Total users, new sign-ups, active chats, messages today, DAU/MAU trend, MAU used vs plan — the numbers a founder checks every morning.
Users
Search any user, see devices, last seen, channels and reports. Deactivate, ban, reset push tokens or export their data for a GDPR request in one click.
Conversations
Browse channels and message counts. Opening message content requires the Reviewer role and is written to the audit log — HIPAA mode can disable it entirely.
Moderation queue
Reports and filter flags land here. Warn, delete, mute or ban with one click; tune profanity, keyword and image rules without a deploy.
Push & integrations
Upload FCM and APNs credentials, test a push to any user, manage webhooks and API keys, see delivery rates and failures.
Analytics & billing
Retention cohorts, messages by type and hour, busiest channels, call minutes used. Invoices, plan changes and MAU caps live here too.
Roles that keep PHI where it belongs.
Role
Dashboard & analytics
User actions
Message content
Billing & keys
Owner
✓
✓
✓ (logged)
✓
Admin
✓
✓
✓ (logged)
—
Moderator
✓
Mute / ban / warn
Flagged only
—
Analyst
✓
—
—
—
Support
Users only
Reset push / devices
—
—
Console seats: 1 on Free, 3 on Starter, 10 on Pro, unlimited on Enterprise. Every console action is written to an immutable audit log you can export.
White-label it for your clients.
Agencies and SaaS teams can brand the console with their own logo, colors and domain (console.yourapp.com) on Enterprise — your clients never see Chatzic.
HIPAA BAA on Pro & EnterpriseGDPRSOC 2 Type II — in progress
Security that regulated apps can sign off on.
Telehealth, mental-health, fintech and education teams use Chatzic because the controls are built in — not bolted on. Here's exactly what we do and what you're responsible for.
TLS 1.3 on every client and API connection. Messages, media and backups encrypted at rest with AES-256 using per-application keys rotated quarterly. Media served over signed, expiring CDN URLs.
HIPAA mode
One switch in the console: PHI-safe push (no message previews), content viewing disabled or Reviewer-only with logging, configurable retention (down to 24 hours), and automatic session timeouts in the console.
Business Associate Agreement
Pro and Enterprise customers receive a signed BAA covering Chatzic as your business associate. Our sub-processors (cloud hosting, push providers) are listed and also under BAA.
Audit logs
Every console action — who viewed what, who banned whom, who changed a filter — is written to an immutable log with actor, IP and timestamp, exportable via API.
Data rights & residency
GDPR/CCPA deletion and export APIs per user. Data hosted in the US (us-east) with EU residency on the Enterprise roadmap. Your data is never used to train models.
Access control
Role-based console access, SSO/SAML on Enterprise, IP allowlisting for the Platform API, short-lived user tokens so your API secret never ships inside an app.
Shared responsibility, clearly split.
Chatzic handles
Infrastructure security, patching and monitoring
Encryption in transit and at rest
Backups, disaster recovery and uptime
Console RBAC, audit logging and session controls
PHI-safe push delivery in HIPAA mode
Sub-processor BAAs and annual reviews
You handle
Authenticating your users and minting tokens server-side
Assigning console roles and reviewing the audit log
Device-level security in your app (biometrics, screen-lock)
Your own privacy policy and patient consent
Choosing retention periods that match your policies
1-on-1 and group video on the same SDK core as Chatzic — start a call straight from a chat thread, with invitations, ringing push and recording handled for you.
Host-and-audience streaming with co-hosts, reactions and Chatzic chatrooms built in — the audience is already in your chat system, so engagement features come free.
Chatzic is built by Niftonic Private Limited — a software studio founded in 2022 in Islamabad that designs, builds and maintains production React Native apps for clients across the USA.
2022Niftonic founded
10+production apps shipped
5.0verified Clutch rating
8+years of React Native
Why we built it
Almost every app we've shipped for a client needed chat — marketplaces, communities, booking apps, social products. Each time, the choice was the same: spend months building messaging infrastructure, or pay enterprise prices for a platform heavier than the product needed. So we built the chat layer we kept wishing existed: React Native-first, complete out of the box, and priced for teams that are still growing.
How we work
Product-grade defaults
Offline sync, receipts, push and moderation aren't add-ons — they're what chat means. Everything a real app needs is on by default.
Honest pricing
Unlimited messages, clear MAU tiers, published overage rates and a hard-cap option. No "contact sales" wall in front of basic numbers.
Direct support
You talk to the engineers who build the product — the same way Niftonic's agency clients have worked with us for years.
Chatzic is led by Niftonic founder & CEO Taimoor Hassan and the engineering team behind our client apps. The studio's agency work continues at niftonic.com — and it's why Chatzic comes with something no other chat platform offers: a team that can integrate it into your app for you.
Mon–Sat · 10:00–19:00 PKT (GMT+5) Overlapping hours kept for US clients.
What to include
Your platform (React Native?), expected MAU, launch timeline, and whether you want our team to handle the integration — we'll come back with a concrete recommendation, not a sales script.
Docs / Introduction / Platform overview
Platform overview
Chatzic is a hosted chat platform: we run the real-time infrastructure, storage, push delivery and moderation tooling, and you integrate it through our SDKs and APIs. You keep full control of your UI and your user identity — Chatzic only needs a user ID.
What you get
Client SDK — connects your app to Chatzic over an encrypted realtime socket, with local caching and offline sync.
UIKit — prebuilt, themeable screens (conversation list, channel screen, composer) built on the SDK.
Platform API — server-side REST API for users, channels, messages, moderation and data export.
Admin Console — a web dashboard for you and your clients: users, active chats, moderation, push, analytics and billing, with roles and audit logs.
Webhooks — event callbacks to your backend for every message and channel event.
How a message flows
Your app connects with the Client SDK → the sender publishes a message → Chatzic persists it, fans it out to online members over the socket, and delivers push to offline members → your backend optionally receives the event on a webhook. Nothing in that path requires your own servers.
Supported platforms
Platform
Package
Status
React Native (iOS + Android)
@chatzic/react-native
Live
React Native UIKit
@chatzic/react-native-uikit
Live
Platform API (REST)
api.chatzic.com/v1
Live
Flutter
chatzic (pub.dev)
Beta
iOS (Swift)
Chatzic (SPM / CocoaPods)
Beta
Android (Kotlin)
com.chatzic:chat-sdk
Beta
JavaScript / Web
@chatzic/js
Beta
Admin Console
console.chatzic.com
Live
Next steps
Core concepts — apps, users, tokens, channels and MAU.
An application is an isolated environment with its own users, channels and settings, identified by an App ID. Create one per product, plus a separate one for staging — data never crosses applications.
Users & tokens
A user is any identity in your system, referenced by a string userId you choose. In development you can connect with just a user ID; in production your server mints a short-lived access token per user so clients never hold secrets. See Users & auth.
Channels
Type
Members
Best for
direct
2
1-on-1 conversations, DMs
group
up to 1,000
Teams, friend groups, order threads
public
unlimited joins
Communities anyone can discover and join
chatroom
20,000 live
Live events and streams — ephemeral membership
Messages
Messages carry a type — text, image, video, audio, file, location or custom (arbitrary JSON) — plus optional metadata, a thread parent and reactions. Media is uploaded to Chatzic storage and served from a CDN with auto-generated thumbnails.
MAU
A monthly active user is a unique userId that connects at least once in a calendar month. Multi-device connections count once; registered users who never connect don't count. Plans are priced on MAU — messages are unlimited.
Regions
Applications are hosted in the US (us-east) today; EU residency is on the roadmap for Enterprise.
Docs / Introduction / Plans & limits
Plans & limits
Every plan includes unlimited messages, the full SDK + UIKit, and push. Limits below are per application; see Pricing for monthly prices.
Limit
Free
Starter
Pro
Enterprise
MAU included
1,000
5,000
10,000
100,000+
Peak concurrent
25
500
1,000
Custom
Group members
100
250
1,000
Custom
Live chatroom size
—
—
20,000
Custom
Message history
30 days
6 months
12 months
Custom
Translation & search
—
—
✓
✓
Webhooks & export
—
—
✓
✓
Support
Community
Email
Priority
Slack + CSM
MAU beyond your included amount is billed at $0.04/MAU on Starter and Pro. You can set a hard MAU cap in the dashboard if you'd rather block new connections than pay overage.
Docs / Quickstart / React Native SDK
React Native quickstart
Send your first message from a bare React Native app in about ten minutes.
Prerequisites
React Native 0.71+ (new architecture and Hermes supported; Expo via dev builds)
Node 18+, Xcode + CocoaPods for iOS, Android Studio for Android
A Chatzic application — create one in the dashboard and copy its App ID
1 — Install
Terminal
npm install @chatzic/react-native
cd ios && pod install
The UIKit gives you production-ready chat screens on top of the SDK: a conversation list, a channel screen with composer, media picker, reactions, threads and typing indicators — all themeable.
Install
Terminal
npm install @chatzic/react-native @chatzic/react-native-uikit
npm install react-native-safe-area-context @react-native-community/netinfo
cd ios && pod install
<ChannelCreate /> — member picker for starting new conversations.
Theming
Every color, radius and font comes from the theme prop; mode: 'auto' follows the device's dark/light setting. For deeper changes, each screen accepts render overrides (e.g. renderMessage) so you can replace any part without forking the kit.
Docs / Quickstart / Push notifications
Push notifications
Chatzic delivers push to offline members automatically once credentials are configured — delivery, retries, token cleanup and unread-count badges are handled by the platform.
1 — Configure credentials
Android (FCM): upload your Firebase service-account JSON in Dashboard → Push.
iOS (APNs): upload your .p8 auth key with Key ID and Team ID.
User reports and filter flags land in Dashboard → Moderation, where operators can delete messages, warn, mute or ban — every action is written to the moderation log. On Pro, a pre-send webhook can route messages through your own review service before delivery.
Docs / Guides / Webhooks
Webhooks
Register an HTTPS endpoint in Dashboard → Webhooks and Chatzic POSTs events to it (Pro and above). Delivery is retried with backoff for 24 hours.
Every delivery carries X-Chatzic-Signature: an HMAC-SHA256 of the raw body using your webhook secret. Reject anything that doesn't match before trusting the payload.
Docs / API reference / REST API
REST API
Base URL: https://api.chatzic.com/v1. Authenticate with Authorization: Bearer <API secret>.
Server-side only. The API secret grants full access to your application — never ship it in a mobile or web client. Clients use short-lived user tokens instead.
Endpoints
Method
Path
Purpose
POST
/users
Create or upsert a user
GET
/users/{id}
Fetch a user
POST
/tokens
Mint a user access token
POST
/channels
Create a channel
POST
/channels/{id}/messages
Send a message as any user or as system
GET
/channels/{id}/messages
List message history
POST
/moderation/bans
Ban or mute a user
POST
/export
Start a data export (JSON/CSV)
Rate limits
100 requests/second per endpoint on paid plans (10/s on Free). Responses include X-RateLimit-Remaining; a 429 carries Retry-After.
Docs / API reference / Error codes
Error codes
Errors return an HTTP status plus a stable code and human-readable message. The SDK surfaces the same codes on error.code.
Code
HTTP
Meaning
Fix
invalid_param
400
A field is missing or malformed
Check the message for the field name
invalid_token
401
Token is malformed or revoked
Mint a fresh token
token_expired
401
Token lifetime elapsed
Refresh via your token endpoint
user_banned
403
User is banned from the channel/app
Lift the ban in moderation
channel_frozen
403
Channel is read-only
Unfreeze, or post as operator
not_found
404
User, channel or message doesn't exist
Verify the ID
already_exists
409
Duplicate create
Use upsert or fetch the existing resource
rate_limited
429
Too many requests
Back off per Retry-After
internal
500
Something broke on our side
Retry; check status.chatzic.com
Docs / Quickstart / Flutter
Flutter quickstart
Flutter 3.16+, iOS 13+, Android 6+. The Dart SDK mirrors the React Native API one-to-one.
1 — Install
Terminal
flutter pub add chatzic chatzic_uikit
cd ios && pod install
Push: add the Push Notifications capability and upload your APNs .p8 key in the console; call client.push.register(apnsToken:) in didRegisterForRemoteNotificationsWithDeviceToken.
Docs / Quickstart / Android (Kotlin)
Android quickstart
Android 6+ (API 23), Kotlin coroutines and Flow, Jetpack Compose or classic Views.
Push: add Firebase Messaging, upload your service-account JSON in the console, and forward the FCM token with client.push.register(fcmToken).
Docs / Quickstart / Web (JavaScript)
Web quickstart
Works in React, Next.js, Vue, Svelte or plain JavaScript (ES2019+). Same user sessions as your mobile apps — a user signed in on iOS can continue on the web.
Browser push: Web Push (VAPID) is supported — register the subscription with client.push.register({ webPush }).
Docs / Guides / Voice & video callsBeta
Voice & video calls
Calls use the same client, users and channels as chat. Enable Calls for your application in the console, then:
calls.ts
// Start a video call with everyone in a channelconst call = await client.calls.start({ channelId: channel.id, video: true });
// Incoming call (ringing push wakes the app)
client.calls.on('incoming', async (incoming) => {
showIncomingUI(incoming.caller);
await incoming.accept({ video: true }); // or incoming.decline()
});
// Render with the UIKit
<CallScreencall={call} layout="grid"onEnd={() => call.end()} />
// Controls
call.mute(); call.toggleCamera(); call.shareScreen(); call.startRecording();
Events in chat
Every call writes a call-type message into the channel (started, missed, ended with duration), so your conversation history stays complete without extra code.
Live streaming
Streams follow the same shape: client.live.start({ channelId }) for the host, client.live.join(streamId) for viewers, and stream.inviteToStage(userId) for co-hosts. The channel doubles as the live chatroom.
Docs / Console & compliance / Admin Console
Admin Console
The console at console.chatzic.com is where you create applications and where your clients manage their chat day to day. Each application has its own team, roles and settings.
Sections
Section
What it shows
Actions
Overview
Total users, new users, active chats, messages today, DAU/MAU chart, MAU used vs plan
Date range, export PNG/CSV
Users
Search, profile, devices, last seen, channels, reports
Retention cohorts, messages by type/hour, call minutes
Export
Settings
API keys, webhooks, HIPAA mode, retention, team & roles
Rotate keys, add members, audit log
Billing
Plan, MAU cap, invoices, usage
Upgrade, set hard cap, download invoices
Inviting your client
Settings → Team → Invite; choose a role (Owner, Admin, Moderator, Analyst, Support).
They receive a magic-link email and land directly in their application.
Enterprise: enable white-label to serve the console from your own domain with your logo.
Embedding metrics in your own admin app
The same numbers are available from the Platform API (GET /v1/metrics/overview, GET /v1/metrics/daily) so you can surface them inside the companion admin apps you already build for clients.
Prerequisite: a Pro or Enterprise plan and a signed BAA. Request it from the console (Settings → Compliance) or email hello@chatzic.com. Do not store PHI before the BAA is countersigned.
1 — Turn on HIPAA mode
Settings → Compliance → HIPAA mode. This applies per application and switches on:
PHI-safe push — notifications say "New message from Dr. Patel" with no message body.
Content viewing lock — console users cannot open message content unless you grant the Reviewer role; every view is audit-logged.
Retention — choose 24 h to 7 years; expired messages are hard-deleted from primary storage and backups within 30 days.
Session timeout — console sessions expire after 15 minutes of inactivity.
Export controls — data exports require Owner role and 2FA.
2 — In your app
Mint tokens server-side with short lifetimes (≤ 1 hour) and require your own authentication (MFA recommended) before issuing one.
Turn off OS-level notification previews for your app or rely on PHI-safe push.
Use client.setLocalCache({ encrypted: true }) so on-device message cache is encrypted with the device keystore.
Call client.disconnect({ wipeCache: true }) on logout.
3 — Operational checklist
Assign console roles by least privilege; review the audit log monthly.
Keep the sub-processor list (available in the console) in your own risk register.
Use the GDPR/HIPAA deletion API for patient data requests: DELETE /v1/users/{id}?purge=true.
Request our latest pen-test summary and SOC 2 progress letter for your compliance file.
