Is Cognigy HIPAA compliant?

Not confirmed. We couldn't find a Business Associate Agreement offer for Cognigy on NiCE's own pages. Without a signed BAA, keep patient data out of it.

Does Cognigy sign a BAA?

Not confirmed

Cognigy's healthcare page shows a HIPAA badge, but no Cognigy page says it signs a BAA. NiCE, which owns Cognigy, says it signs BAAs for the services it provides, without saying whether Cognigy is included, so BAA availability for Cognigy is unknown.

Based on 5 sources, all from NiCE unless marked.

Business associate
NiCE
Tool
Cognigy
Plans with a BAA
Not stated
Checked
Not confirmed
No BAA offer found on NiCE's own pages.

By plan

PlanBAAHow to get itConditions
Cognigy.AI (cloud or on-premises)Not confirmedNot statedCognigy's trust center lists ISO 27001, ISO 42001, SOC 2 Type II, TISAX and C5 but not HIPAA or a BAA. NiCE's trust center says NiCE signs a BAA on request, scoped to the services it provides, but names no products. The Cognigy product terms do not mention HIPAA or PHI.[1],[2],[3],[4],[5]

Are the AI features covered?

Vendors often sign a BAA for the core product but leave some AI features out. Here is what NiCE says about each one.

AI featureUnder the BAADetails
Third-party LLMs, speech and translation services used by CognigyNot statedNiCE's Cognigy terms class LLMs, speech and translation services as third-party services under the provider's own terms. No page says whether any BAA reaches them.[3]

AI voice agents that offer a BAA

All BAA-ready alternatives to Cognigy

Sources

  1. AI Agents for HealthcareCognigy, Documentation. Checked Oct 13, 2026. Archived copy
  2. Cognigy Trust CenterCognigy, Trust center. Checked Oct 13, 2026. Archived copy
  3. NiCE product-specific terms: CognigyNiCE, Legal terms. Checked Oct 13, 2026. Archived copy
  4. NiCE Trust CenterNiCE, Trust center. Checked Oct 13, 2026. Archived copy
  5. HIPAANiCE, Help center. Checked Oct 13, 2026. Archived copy

A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.