A number cannot be on the ordinary app and the Business Platform at once
To run an assistant programmatically you generally need the number registered on the WhatsApp Business Platform, and once it is, that number no longer works in the everyday WhatsApp app on a handset. Owners who register their personal mobile discover this the hard way, mid-migration, with family chats attached. Decide up front whether this worker gets its own dedicated number, which is almost always the right answer, and keep your personal number personal.
The 24 hour window and template approval shape what it can start
On the Business Platform, free-form messages to a person are generally only permitted within a service window that opens when they message you, commonly 24 hours. Outside it, the business can only send message templates that have been submitted and approved in advance. That is fine for an assistant you message first, and it is a genuine constraint on anything that needs to reach out unprompted. Design the proactive messages as a small set of approved templates rather than assuming the worker can say anything at any time.
Encryption in transit does not mean nobody reads it
WhatsApp messages are end to end encrypted between the person and the platform, but the encryption ends at the platform. Your assistant is a participant, so the content is decrypted there and processed on the business side, and the platform itself retains messages for up to 30 days. That is not a flaw, it is how any assistant works, but it means the privacy story is about what your side does with the content: where it is processed, how long it is kept, who could technically see it and what is excluded. Get that written down. Telling staff or customers that a thread is encrypted, and implying nobody reads it, is misleading.
Business records living in a personal chat app
Australian businesses have retention and retrievability obligations for financial and employment records, and a thread on a handset satisfies none of them, particularly once the phone is upgraded or the account is recovered on a new device. The rule that keeps you safe is that the conversation is an interface only and every record is written to the system that owns it at the moment of capture. Audit this occasionally by asking what would be lost if the chat vanished tonight. The answer should be nothing.
Accidental confirmation in a low friction interface
The thing that makes chat pleasant, a single tap to reply, is the thing that makes it dangerous for consequential actions. A reflexive "yep" to the wrong thread, or a voice note misheard, should never be able to release a payment, send a quote, agree a variation or accept a supplier price. Keep those actions as drafts confirmed elsewhere. If someone offers to remove that friction for you, understand that they are removing the safeguard rather than improving the product.
Staff and clients start messaging it instead of you
Once a number exists that answers reliably, people use it, and an assistant scoped for one owner will suddenly be receiving client questions, staff leave requests and supplier queries it was never designed to handle. Decide early whether this is a private number for the owner or a business-facing channel, because the two need very different scopes, disclosure and escalation rules. If it is business-facing, callers and messagers must be told plainly that they are dealing with an automated assistant and be able to reach a person easily.