Does Doximity Scribe / Doximity GPT (Ask) sign a BAA?
Yes, it signs a BAA
Doximity's BAA is built into its Terms of Service, so each verified clinician is covered on registration, and Doximity says Scribe is covered. Doximity GPT (now called Ask) is marketed for clinical use, but no official page explicitly says it is under the BAA.
- Business associate
- Doximity
- Tool
- Doximity Scribe / Doximity GPT (Ask)
- Plans with a BAA
- Free (verified U.S. clinicians and students); Enterprise (institutional agreement)
- Checked
Signs a BAA
By plan
| Plan | BAA | How to get it | Conditions |
|---|---|---|---|
| Free (verified U.S. clinicians and students) | Signs a BAA | Included in the terms | The BAA is incorporated into the Terms of Service and takes effect when a provider registers. It covers Doximity Tools only to the extent Doximity identifies them as secure enough for PHI. Scribe is free for verified U.S. physicians, NPs, PAs and medical students.[1],[2],[3] |
| Enterprise (institutional agreement) | Signs a BAA | Through sales | Enterprise customers get an institutional BAA, which takes precedence over the member BAA where one is active.[1],[2] |
Are the AI features covered?
Vendors often sign a BAA for the core product but leave some AI features out. Here is what Doximity says about each one.
| AI feature | Under the BAA | Details |
|---|---|---|
| Doximity Scribe (ambient notes) | Covered | Doximity says all users are covered by its BAA and that Scribe is HIPAA-compliant. It has a BAA with OpenAI, which powers Scribe. Audio is discarded after the note is generated, and notes are deleted after 29 days.[3],[4] |
| Doximity GPT / Ask (clinical AI assistant)Free (verified U.S. clinicians and students) | Not stated | Doximity calls Ask/DoxGPT HIPAA-compliant and handles patient data and uploads within a secure framework. It also says prompts are not used for training. No official page explicitly places Ask/GPT under the member BAA, which covers only tools Doximity identifies as appropriate for PHI.[1],[5],[6] |
Compare Doximity Scribe / Doximity GPT (Ask)
- Freed vs Doximity ScribeFreed: signs a BAA
Sources
- Business Associate Agreement
- Doximity Security
- Meet Doximity Scribe
- How To Use Doximity Scribe
- Doximity Ask
- What's New with DoxGPT?
A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.