The Blog
Insights on AI governance, healthcare AI, and the realities of compliant adoption.
Is CompliantChatGPT HIPAA Compliant?
CompliantChatGPT includes a BAA on all four tiers and carries the strongest training-exclusion language in this directory. Its control is de-identification befo…
Is Hathr.AI HIPAA Compliant?
Hathr.AI advertises 24-hour BAAs, runs on HHS-approved AWS GovCloud, and states it never trains on customer data. Its FedRAMP High claim is infrastructure-level…
AI Vendor BAA Guide
A BAA is the contract 45 CFR 164.502(e) requires before a covered entity discloses PHI to a vendor. What it covers, how to obtain one by vendor type, the subcon…
Is BastionGPT HIPAA Compliant?
BastionGPT includes a BAA automatically on all paid plans and never trains on customer data, which is a cleaner posture than most. Note that its HITRUST and SOC…
Attestation Instruments vs a Business Associate Agreement
A controls attestation describes practice. A Business Associate Agreement allocates liability, and it is the instrument 45 CFR 164.502(e) names before PHI may g…
Is Microsoft Copilot HIPAA Compliant?
Microsoft Copilot is Microsoft's name for the personal-account product, and it has no BAA. Microsoft 365 Copilot is the work product, and it is named in Microso…
What Is Token Expense Management?
Healthcare MCP Servers Compared: What's Actually Production-Ready in 2026
A researched comparison of every healthcare MCP server we could verify in 2026: what each connects to, what it claims on compliance, and what still doesn't exis…
Is Doximity GPT HIPAA Compliant?
Doximity attaches a BAA to every verified clinician's membership at registration, and Doximity GPT is free for verified U.S. physicians, NPs, PAs, and medical s…
Is Nabla HIPAA Compliant?
Nabla makes its BAA a mandatory appendix of its Terms of Service, you cannot use the service without agreeing to it. One clause reserves broad rights over de-id…
Is Blueprint HIPAA Compliant?
Blueprint includes a BAA automatically in its Terms of Service on all plans and states client data is never used to train AI models. One of the cleanest posture…
Is Google Vertex AI HIPAA Compliant?
Google Cloud signs a self-serve BAA, but coverage is by named product, and "Vertex AI" by that name is not on the covered-products list as of this writing. Matc…
Is Adobe Acrobat AI Assistant HIPAA Compliant?
Adobe's HIPAA-Ready Services list does not include Acrobat AI Assistant, or any Acrobat product except Acrobat Sign. Adobe's own policy prohibits PHI in product…
Is Krisp HIPAA Compliant?
Krisp offers a BAA only on the Enterprise tier of its AI Meeting Assistant, with a 100-seat minimum, putting compliance out of reach for small practices entirel…
Is Retell AI HIPAA Compliant?
Retell AI signs BAAs on all plans at no fee, but its privacy policy grants itself the right to train on customer data by default. The vendor's own enterprise gu…
Is Heidi Health HIPAA Compliant?
Heidi Health executes BAAs when handling PHI and states plainly it does not train its AI on your data. The gap: no vendor page says which plan tier includes the…
Is Freed HIPAA Compliant?
Freed includes its BAA in the Terms of Use on every plan, including the trial, the cleanest BAA posture in this directory. The nuance: Freed trains its AI on de…
Is Plaud HIPAA Compliant?
Plaud publishes ISO 27001, SOC 2 Type II, and a HIPAA Validation Report, plus a DPA on the Team plan. A Business Associate Agreement is not among them. Verified…
Is Read AI HIPAA Compliant?
Read AI supports HIPAA only on Enterprise+ annual, with a five-license minimum, SAML SSO, domain capture, and a BAA executed through support. Any other setup is…
Is Fireflies.ai HIPAA Compliant?
Fireflies.ai supports HIPAA only on Enterprise, and only with Private Storage also enabled. Skip either switch and the setup is not compliant, even with a signe…
Is Zoom AI Companion HIPAA Compliant?
Zoom AI Companion can operate under HIPAA on paid Zoom plans with a BAA, and Zoom states it does not train its or third-party AI models on your meeting content.…
Is Otter.ai HIPAA Compliant?
Otter.ai signs a BAA on its Enterprise plan only. Below that, it trains its AI on your transcripts by default. The tier-by-tier answer, and why this is the shar…
Shadow AI's Compliance Gap Has Reached Healthcare. The Regulators Aren't Ready.
Banking acknowledged its shadow AI compliance gap. Healthcare hasn't. Where shadow AI clusters in clinical workflows and three ways to close the gap.…
AI Tool HIPAA Compliance Directory: BAAs, Training Policies, Verdicts
Which AI tools sign BAAs, on which tier, and which ones train on your data. Primary-source verdicts for the AI tools healthcare staff actually use, updated as v…
AI Employees in Healthcare: Why the Label Is Wrong and What It Costs You
AI employees in healthcare bypass HIPAA governance and add $670K per breach. Learn why the label fails and the NIST vocabulary to use instead.…
Is Gemini HIPAA Compliant?
Gemini on a personal account is not HIPAA compliant, and Google says so directly in its own privacy notice. The Workspace and Cloud routes can be, once you conf…
The Year AI Agents Got Promoted
What an AI employee actually is, how it differs from an AI agent, the real 2026 vendors (Lindy, Sintra, Bond, Hippocratic), and 8 questions to ask before signin…
Hospital AI Policy: What It Must Cover in 2026
What a hospital AI policy is, the ten sections it needs, and how to roll one out without banning the tools staff already rely on.…
Is Claude HIPAA Compliant?
Claude the app is not HIPAA compliant. Claude the model has four BAA-covered routes into healthcare. Which one fits, and what each covers.…
The Healthcare AI Governance Committee: Who Sits on It and What It Decides
Who belongs on a healthcare AI governance committee, the five decision rights that make it real, and the first 90 days that decide whether it works.…
The AI Acceptable Use Policy: What Healthcare Versions Get Wrong
What an AI acceptable use policy is, the five mistakes healthcare versions make, and the structure staff will actually follow.…
Is ChatGPT HIPAA Compliant?
ChatGPT is not HIPAA compliant by default. No consumer tier includes a BAA. Here is what OpenAI actually offers, tier by tier, and what a compliant deployment r…
PHI and AI: Where Protected Health Information Actually Leaks
What counts as PHI in an AI context, the six places it actually reaches AI tools, and the controls that catch each one.…
The AI Security Alphabet Soup, Decoded
AI DLP, AIDR, AI MDR, SSPM, CASB, SASE. Seven categories of AI security tools, sorted into three lenses, in plain language, with healthcare examples. Know what …
Shadow AI: The Invisible Risk Spreading Across Every Industry
40% of organizations have shadow AI they don't know about. Learn the 7-step governance framework to detect unauthorized AI tools, assess risk, and prevent data …
Is Your Healthcare Organization Ready for AI? A 6-Dimension Assessment Framework
Most healthcare AI pilots fail because organizations skip readiness assessment. Use this 6-dimension framework to evaluate workflows, data, governance, and comp…
Artificial Intelligence in Healthcare: The Hidden Risk
Artificial intelligence in healthcare promises efficiency and better outcomes—but Shadow AI creates compliance risks most organizations miss.…
Why AI Projects Fail Healthcare Contact Centers
***(As Featured in Medical Call Center News - Sept 2025)***…
Healthcare Contact Center AI Integration Best Practices
Explore best practices for integrating AI into healthcare contact centers, balancing efficiency with patient trust and compliance.…
AI Strategy Roadmap for Healthcare Contact Centers
Explore a strategic roadmap for implementing AI in healthcare contact centers to enhance efficiency, reduce costs, and improve patient care.…
5 Ways AI Reduces Healthcare Contact Center Costs
Explore how AI streamlines healthcare contact centers, cutting costs and boosting efficiency while enhancing patient care and satisfaction.…
ROI Calculator Measuring AI Impact in Healthcare Contact Centers
Learn how to measure the ROI of AI in healthcare contact centers through improved efficiency, cost savings, and enhanced patient communication.…
7 AI Solutions Transforming Healthcare Contact Centers
Explore how AI is revolutionizing healthcare contact centers by enhancing patient support, streamlining operations, and ensuring data security.…
Common Questions About Healthcare Contact Center AI
Explore how AI is revolutionizing healthcare contact centers by enhancing patient experiences, streamlining operations, and enabling proactive care.…