Is Aidoc HIPAA compliant?
Not confirmed. We couldn't find a Business Associate Agreement offer on Aidoc's own pages. Without a signed BAA, keep patient data out of it.
Does Aidoc sign a BAA?
Not confirmed
Aidoc processes hospital imaging data on its customers' behalf and lists HIPAA in its trust center, but no official page states that it signs BAAs or how to get one. BAA availability is unknown; it is sold only through enterprise contracts.
- Business associate
- Aidoc
- Tool
- Aidoc
- Plans with a BAA
- Not stated
- Checked
By plan
| Plan | BAA | How to get it | Conditions |
|---|---|---|---|
| Enterprise (health system contract, aiOS platform) | Not confirmed | Not stated | The privacy policy says Aidoc processes customer information on behalf of the customer, outside that policy. The SafeBase trust center lists HIPAA as a compliance item, a HIPAA report and a Data Processing Agreement, but no BAA. Ask Aidoc whether a BAA comes with the contract.[1],[2],[3] |
Are the AI features covered?
Vendors often sign a BAA for the core product but leave some AI features out. Here is what Aidoc says about each one.
| AI feature | Under the BAA | Details |
|---|---|---|
| aiOS imaging AI (triage, detection) and CARE foundation models | Not stated | No official page describes BAA coverage for these features. The privacy policy says Aidoc may use anonymized information without restriction to improve its services.[1],[3] |
Clinical AI assistants that offer a BAA
- Ada HealthBAA on: Enterprise partner deployments (health systems, payers)Some plans only
- Glass HealthBAA on: Glass Developer APISome plans only
- UpToDate Expert AIBAA on: Enterprise / institutional subscriptionSome plans only
- InfermedicaBAA on: Enterprise / API clients (health systems, payers, digital health)Signs a BAA
- OpenEvidenceBAA on: OpenEvidence accounts used by US covered entitiesSigns a BAA
- OverjetBAA on: Overjet customers under a Master Services AgreementSigns a BAA
All BAA-ready alternatives to Aidoc
Sources
A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.