Is Cognigy HIPAA compliant?
Not confirmed. We couldn't find a Business Associate Agreement offer for Cognigy on NiCE's own pages. Without a signed BAA, keep patient data out of it.
Does Cognigy sign a BAA?
Not confirmed
Cognigy's healthcare page shows a HIPAA badge, but no Cognigy page says it signs a BAA. NiCE, which owns Cognigy, says it signs BAAs for the services it provides, without saying whether Cognigy is included, so BAA availability for Cognigy is unknown.
- Business associate
- NiCE
- Tool
- Cognigy
- Plans with a BAA
- Not stated
- Checked
By plan
| Plan | BAA | How to get it | Conditions |
|---|---|---|---|
| Cognigy.AI (cloud or on-premises) | Not confirmed | Not stated | Cognigy's trust center lists ISO 27001, ISO 42001, SOC 2 Type II, TISAX and C5 but not HIPAA or a BAA. NiCE's trust center says NiCE signs a BAA on request, scoped to the services it provides, but names no products. The Cognigy product terms do not mention HIPAA or PHI.[1],[2],[3],[4],[5] |
Are the AI features covered?
Vendors often sign a BAA for the core product but leave some AI features out. Here is what NiCE says about each one.
| AI feature | Under the BAA | Details |
|---|---|---|
| Third-party LLMs, speech and translation services used by Cognigy | Not stated | NiCE's Cognigy terms class LLMs, speech and translation services as third-party services under the provider's own terms. No page says whether any BAA reaches them.[3] |
AI voice agents that offer a BAA
- Bland AIBAA on: Healthcare / Enterprise deploymentsSome plans only
- Genesys Cloud AIBAA on: Genesys Cloud (HIPAA-enabled organization, US regions)Some plans only
- Nextiva AIBAA on: Nextiva HIPAA service configurationSome plans only
- NiCE CXone MpowerBAA on: CXone tenants (enterprise contract)Some plans only
- SynthflowBAA on: Enterprise (sales-led annual agreement)Some plans only
- Twilio (Voice, ConversationRelay, Flex)BAA on: Security Edition or Enterprise EditionSome plans only
All BAA-ready alternatives to Cognigy
Sources
- AI Agents for Healthcare
- Cognigy Trust Center
- NiCE product-specific terms: Cognigy
- NiCE Trust Center
- HIPAA
A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.