OpenBSP
Sign inStart building
Built on Meta Cloud API v21

The WhatsApp inbox
your DPO will sign off.

Real-time conversations, segmented broadcasts and 24h-window-aware replies — with healthcare-grade content guardrails, per-purpose consent, and append-only audit by default. Connect your own WABA in minutes.

CxConvex
NNext.js
▲Vercel
∞Meta
AIOpenAI
AAnthropic
SStripe
RResend
CxConvex
NNext.js
▲Vercel
∞Meta
AIOpenAI
AAnthropic
SStripe
RResend
Core Platform

Inbox, broadcasts, compliance.

Three pillars another platform sells separately.
Here they ship together — and were designed to compose.

Olá, posso confirmar a consulta amanhã?
Confirmado! Quarta às 10h✓✓

Real-time inbox

Conversations stream in via Convex reactive subscriptions. No polling, no refresh.

appointment_reminderQuality green
214
Sent
198
Delivered
141
Read
3 skipped (opt-out)12 replies tracked

Smart broadcasts

Quality-aware throttle. Auto-pause when rating drops to red.

✓Marketing consent grantedform_web_v3
✓Transactional auto-recordedinbound msg
✓STOP keyword → revokewebhook
⛨Audit hash chain intact2,481 events

Consent + audit

Append-only audit log. Per-purpose, per-channel consent vector.

What ships in the box

Three pieces.
Production-grade by default.

Each card is a pillar that another platform sells separately. WithOpenBSP, they ship together and were designed to compose.

Realtime Inbox

Conversations stream in live via Convex reactive queries. No polling, no refresh, no missed messages — even at 50 agents.

Smart Broadcasts

Segment by tag, schedule via Convex scheduler, ship Meta-approved templates, auto-pause when quality dips. Idempotent end to end.

Compliance Built-in

Healthcare allowlist, opt-in by purpose with proof, append-only audit hash chain. Pass DPO and Meta review on day one.

Compliance by default

Built so Meta and your DPO sleep at night

Healthcare-mode allowlist, opt-in granular por finalidade, webhook idempotency state machine, append-only audit com hash chain. Não é uma caixa que ticas — é como cada mutation foi desenhada.

  • RGPD
    Export + erase + retention
  • Meta policies
    Healthcare allowlist
  • Idempotency
    At-least-once safe
  • Multi-tenant
    Wrapper-enforced
  • Audit
    Hash-chained, WORM export
  • Quality
    Per-batch circuit breaker
Official Cloud API, not browser automation

The system from the live, built for coexistence.

Keep the client's WhatsApp Business workflow, then add official campaigns, contact folders, CTWA attribution, Meta failure intelligence, and guarded AI handoff.

Campaign engine
Lists, recipients, launch, status sync
Failure intelligence
Meta codes grouped by fix
Coexistence
Embedded Signup readiness path
Guarded AI
Ad leads first, human override always