Does Commure Ambient sign a BAA?
Yes, it signs a BAA
Commure publishes a Business Associate Addendum that is folded into its service agreements. Its Commure Scribe documentation says Commure signs BAAs with covered entities, including self-serve subscribers who ask through support.
- Business associate
- Commure
- Tool
- Commure Ambient
- Plans with a BAA
- Commure Scribe self-serve (Pro monthly/annual); Commure Ambient enterprise / group (service agreement)
- Checked
Signs a BAA
By plan
| Plan | BAA | How to get it | Conditions |
|---|---|---|---|
| Commure Scribe self-serve (Pro monthly/annual) | Signs a BAA | Request by email | The Scribe docs say a standard BAA is available for review and that customers request or sign one by contacting support. The billing page lists a one-week free trial and Pro plans ($89/mo monthly, $59/mo annual) but does not mention BAAs. No dedicated support address appears on the BAA page.[3],[4] |
| Commure Ambient enterprise / group (service agreement) | Signs a BAA | Through sales | The Business Associate Addendum is incorporated by reference into Commure service agreements signed after 6/24/2025. Groups of 4 or more providers and Enterprise (EHR write-back) go through sales.[5],[4],[6] |
Are the AI features covered?
Vendors often sign a BAA for the core product but leave some AI features out. Here is what Commure says about each one.
| AI feature | Under the BAA | Details |
|---|---|---|
| Ambient AI note generation | Covered | Commure says subprocessors that handle PHI are under BAAs and that PHI is never used to train AI models. The addendum allows de-identified data, tokenized through a third-party vendor, to be used for any lawful purpose. Scribe data, including audio and transcripts, is kept for 6 years.[3],[7],[5] |
Sources
- Commure Trust Center
- Augmedix
- HIPAA Compliance & BAA
- Billing & Pricing
- Business Associate Addendum (current)
- Commure Ambient AI
- Security & Compliance
A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.