Is athenaOne AI HIPAA compliant?
Only on the right plan. athenahealth, Inc. signs a Business Associate Agreement with its customers on athenaOne (EHR, practice management and patient engagement). Other plans aren't covered, so keep patient data out of them. athenahealth, Inc. doesn't say whether the BAA covers its AI features.
Does athenaOne AI sign a BAA?
Only on some plans or setups
athenahealth's privacy policy says its customer agreements may include BAAs where HIPAA requires, but no public athenahealth page shows the BAA or says that its AI features, including Ambient Notes partners, are covered. Treat the AI features as unconfirmed until athenahealth confirms in writing.
Not confirmed for the AI features: athenahealth, Inc. doesn’t say whether its BAA covers Ambient Notes (integrated ambient scribe partners, including Abridge) and athenaAmbient; Other athenaOne AI features (AI summaries, chart search assistant, AI patient communication, Express Coding). Get that in writing before using them with patient data.
- Business associate
- athenahealth, Inc.
- Tool
- athenaOne AI
- Plans with a BAA
- athenaOne (EHR, practice management and patient engagement)
- Checked
By plan
| Plan | BAA | How to get it | Conditions |
|---|---|---|---|
| athenaOne (EHR, practice management and patient engagement) | Conditions apply | Through sales | The privacy policy says processing done for provider customers is governed by customer agreements that may include BAAs as HIPAA requires. The athenaOne help page says athenahealth keeps HIPAA security and privacy plans and has business associate agreements with third parties it hires that need access to practice data. No page states outright that athenahealth signs a BAA with every athenaOne practice, and the agreement text is not public.[1],[2] |
Are the AI features covered?
Vendors often sign a BAA for the core product but leave some AI features out. Here is what athenahealth, Inc. says about each one.
| AI feature | Under the BAA | Details |
|---|---|---|
| Ambient Notes (integrated ambient scribe partners, including Abridge) and athenaAmbient | Not stated | Ambient Notes is athenahealth's program of integrated ambient documentation partners; Abridge joined it in February 2025. athenahealth lists a native scribe, athenaAmbient, as coming in 2026. No page checked says whether partner scribes are under athenahealth's BAA or need their own BAA with the practice.[3],[4] |
| Other athenaOne AI features (AI summaries, chart search assistant, AI patient communication, Express Coding) | Not stated | athenahealth says practices can turn AI features on or off. The AI page does not mention HIPAA, PHI, BAAs, the model providers, or whether data is used for training.[3] |
EHR and practice software AI that offer a BAA
- Canvas Medical AIBAA on: Canvas Platform (Master Subscription Agreement)Signs a BAA
- eClinicalWorks AIBAA on: eClinicalWorks EHR / practice management customersSigns a BAA
- Elation Note AssistBAA on: Elation EHR subscription (Note Assist free allowance or unlimited add-on)Signs a BAA
- Epic AIBAA on: Epic EHR customer license (health systems and medical groups)Signs a BAA
- Healthie AIBAA on: Healthie plans (Plus, Group, Enterprise) with AI ScribeSigns a BAA
- Jane AI ScribeBAA on: Jane subscription (Balance, Practice, Thrive) with AI Scribe Free or UnlimitedSigns a BAA
All BAA-ready alternatives to athenaOne AI
Compare athenaOne AI
- Epic AI vs athenaOne AIEpic AI: signs a BAA
Sources
- Information & Digital Privacy Policy
- User Guide — Security and HIPAA
- Innovative Healthcare AI Solutions
- athenahealth and Abridge Partner to Deliver AI Designed for the Needs of Ambulatory Care Practices
A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.