Does AWS HealthScribe sign a BAA?
Yes, it signs a BAA
AWS HealthScribe is a HIPAA-eligible service, listed under AWS Transcribe in AWS's BAA services-in-scope list. Customers accept the AWS BAA themselves in AWS Artifact.
- Business associate
- Amazon Web Services
- Tool
- AWS HealthScribe
- Plans with a BAA
- AWS accounts with the AWS BAA accepted (US East, N. Virginia)
- Checked
Signs a BAA
By plan
| Plan | BAA | How to get it | Conditions |
|---|---|---|---|
| AWS accounts with the AWS BAA accepted (US East, N. Virginia) | Signs a BAA | Accept or sign online | Customers review and accept the AWS BAA in AWS Artifact in the AWS Management Console. PHI should go only into HIPAA-eligible services. HealthScribe is available only in US East (N. Virginia) and supports US-English general medicine and orthopedics conversations in batch mode.[1],[2],[3],[4] |
Are the AI features covered?
Vendors often sign a BAA for the core product but leave some AI features out. Here is what Amazon Web Services says about each one.
| AI feature | Under the BAA | Details |
|---|---|---|
| HealthScribe transcription and AI-generated clinical notes | Covered | The HIPAA services-in-scope list includes HealthScribe under AWS Transcribe. AWS says HealthScribe does not train on customer content and does not keep data once the output is delivered.[1],[3],[4] |
Sources
- AWS Services in Scope by Compliance Program: HIPAA BAA
- HIPAA Compliance
- AWS HealthScribe FAQs
- AWS HealthScribe AI Service Card
A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.