Trust & continuity

The questions you should ask a small vendor.

PostCallMD is a small company. If your group is doing diligence on us, you will figure that out in about four minutes, whether you search yourself or ask an AI to do it for you. Rather than make you dig, here are the questions that diligence should surface, answered in one place.

Who is behind this?

PostCallMD is operated by Nice Schedule, LLC, a United States company. It was built and is run by Moultrie Ball. When you email us, call us, or get onboarded, that is who you are talking to. There is no sales team, and the person who builds your solver is the person who answers your questions.

Why does it exist?

PostCall was not built as a startup looking for a market. It was built for one group: Trident Anesthesia, twenty-five physicians covering two hospitals and six surgery centers. Their schedule had outgrown the spreadsheet, and the first version of PostCall was not a product at all. It was a CP-SAT solver tuned to their actual rules: post-call cardiac coverage, weekend pairings, site certifications.

The solver worked, and then the requests came. Somewhere to collect the day-off emails. A way to run the vacation draft without the reply-all. A schedule you could read from the OR. Feature by feature, the solver grew into PostCallMD. Trident has published its monthly call schedule through it since November 2025.

We think this is the right way around. Software that starts as a pitch deck has to go find a scheduling problem. PostCall started as a scheduling problem.

What happens if you get hit by a bus?

This is the right question to ask any small vendor, so we answered it in writing before you had to ask. Three commitments, all in our terms of service, not in a side letter:

• Your data belongs to your group. On request from your administrator, we provide an export of your active account data. That is true at any time, not just on the way out.
• The foundational solver behind PostCall, ai-call-scheduler, is open source under the MIT license and stays publicly available no matter what happens to us.
• If PostCall permanently ceases operations, or discontinues the service without providing a successor, active customers can request the production scheduling code needed to generate their own group's schedule, with a perpetual, royalty-free license to keep using it internally.

No active customer is left unable to produce a schedule if PostCall winds down.

Where does our data live?

The application and database run on AWS in the United States: EC2 for compute, PostgreSQL on EBS for storage, SES for transactional email, and Parameter Store for secrets. Backups are rolling EBS snapshots. The marketing site is served through Cloudflare Pages. In transit, everything is HTTPS. At the account level: hashed passwords, role-based access controls, rate limits, and operational logging. The full detail, including every service provider we use, is in the privacy policy.

What about PHI?

A call schedule contains no patient information. It is doctor names, dates, sites, and assignments. PostCall is designed to run without any protected health information at all, and for most groups it does.

The one place patient details could sneak in is email: if a doctor writes something clinical in a scheduling email, our parsing pipeline would see it. So we are explicit about it. We tell groups not to put PHI in scheduling emails, every parsed request is reviewed by your administrator before anything happens, and if your organization needs email ingestion covered by a Business Associate Agreement, we will sign one. Email parsing uses OpenAI as a service provider, which is disclosed in the privacy policy rather than buried.

What certifications do you have?

Here is the honest list of what we do not have: no SOC 2, no HITRUST, and no formal uptime SLA in our standard terms. Certifications like SOC 2 cost more than a company our size can justify before the customer base demands them. When it does, we will get them.

What we will do today: complete your security questionnaire, walk your IT person through the infrastructure on a call, and negotiate an SLA in a signed agreement if your group needs one. We would rather tell you what is missing than let you find out from a footnote.

Can we talk to a real customer?

Yes, with one honest caveat. The reference is Trident Anesthesia, the group PostCall was built for. Start with the case study; it covers most of what a first call would.

The caveat: Trident's physicians practice full time. They are in the OR most days, and taking reference calls is a favor they do us on top of that. So we save the introduction for groups late in a serious evaluation: you have seen the product, you have your quote, and hearing from a real customer is what stands between you and a decision. If that is where you are, we will set up the call, and you can ask them what we are actually like to work with.

What does leaving look like?

Either party can terminate for convenience with thirty days' written notice. On the way out, your administrator requests an export and gets your data. There is no multi-year lock-in in our standard terms, and no penalty for deciding it did not work.

And before any of that matters: your group approves the first live schedule before you pay anything. If the first schedule is not right, you have lost some meetings, not money.

Terms and privacy policy are the governing documents. This page summarizes them; it does not replace them.