Patient messages,
wiped when a phone is lost.
Scans, lab reports, admission details and patient phone numbers travel between reception, nurses and consultants on personal phones. Under the DPDP Act that data is the clinic's responsibility — including on the handset that just went missing. Quill keeps it encrypted, and lets you wipe it from a device you no longer control.
No card needed. 14 days of the full product, for the whole clinic.
Patient data that cannot wander off
Every message, report and photo is encrypted on the device with the Signal Protocol — X3DH key agreement and the Double Ratchet. Our servers store no message content at all.
Remote device wipe
A phone is lost, stolen, or belongs to a staff member who left this morning. From the admin panel the clinic wipes Quill's data from that device — the encrypted local database and its keys go with it.
PIN and biometric lock
Quill will not open without a PIN or fingerprint, locks itself again after inactivity, and blocks screenshots — so a shared or unattended handset does not expose a patient's chat.
Disappearing messages
Set patient discussions to self-destruct, or send a report as one-time view media. An ephemeral mode keeps no history on the device at all.
Encrypted files and photos
Reports, scans, prescriptions and ward photos are encrypted on the sender's device and decrypted only by the recipient. They are never readable in transit or on our servers.
Admin control
No public sign-up: the clinic's administrator creates every account, suspends it the day someone leaves, and can erase the entire workspace in one click. Hosted in AWS Mumbai.
Nothing stored to leak
The server is a blind relay that holds no message content. Undelivered messages wait as encrypted blobs and are purged the moment they are delivered — there is no patient message archive to breach.
How a clinic sets it up
Three steps, one afternoon — no IT project, no servers to run.
Create the workspace in two minutes
Pick a workspace name, confirm the clinic's e-mail address, and whoever signs up becomes the administrator. The 14-day trial starts immediately, with no card.
Add the staff from the panel
The administrator creates an account for each doctor, nurse and front-desk staff member and hands over the credentials directly. Accounts can be suspended, wiped or deleted from the same screen.
Everyone installs the app
Android, iOS and Windows. Each person signs in, sets a PIN or biometric lock, and their keys are generated on that device — where they stay.
Built for confidentiality-bound teams. Quill is designed for people who handle other people's private information as a duty — the product decisions all favour confidentiality over convenience.
What it costs
Per user, per month, in INR excluding GST. Every plan starts with a free 14-day trial — no card and no sales call. GST invoices included.
Team
- Encrypted chat, calls, files and photos
- Disappearing messages and one-time media
- PIN and biometric lock, screenshot blocking
- Admin panel: create, suspend and manage users
Minimum 3 users — a single-doctor clinic fits here.
Start free trialBusiness
- Everything in Team
- Remote wipe of a lost or leaving staff member's device
- Hidden chats and disguise controls
- Larger groups, larger attachments, priority support
No minimum.
Start free trialHospital groups that need self-hosting, enforced two-factor sign-in or audit logs are on the Enterprise plan — see the full comparison or talk to us. Cancel any time from the admin panel.
Get patient chatter off personal WhatsApp
Set the workspace up in two minutes and try it with one shift. The first 14 days are free.
Start your free trialQuestions first? Talk to support — or read how the encryption works.