Is Dyna AI HIPAA compliant?
Not for patient data. EBSCO doesn't sign a Business Associate Agreement for Dyna AI, and HIPAA requires one before a vendor handles PHI for you.
Does Dyna AI (DynaMed) sign a BAA?
No BAA available
EBSCO's terms for its DynaMed websites bar users from entering HIPAA-protected health information into its AI tools, including Dyna AI. No BAA for Dyna AI is published.
- Business associate
- EBSCO
- Tool
- Dyna AI (DynaMed)
- Plans with a BAA
- None
- Checked
By plan
| Plan | BAA | How to get it | Conditions |
|---|---|---|---|
| Dyna AI add-on (DynaMedex / Dynamic Health subscriptions) | No BAA | Not offered | The AI annex of the DynaMed terms says users will not input health information protected by HIPAA, or GDPR personal data, into the AI Tools. The terms do not mention a BAA. They yield to an institution's separate SaaS or license agreement where the two conflict, so an institution should check its own contract, but nothing public says a BAA is offered.[1],[2] |
Are the AI features covered?
Vendors often sign a BAA for the core product but leave some AI features out. Here is what EBSCO says about each one.
| AI feature | Under the BAA | Details |
|---|---|---|
| Dyna AI (generative clinical answers from DynaMed content) | Excluded | PHI input is prohibited. Dyna AI uses retrieval-augmented generation over DynaMed content; the terms refer to AI tools licensed from third parties but name no model provider.[1],[2] |
Clinical AI assistants that offer a BAA
- Ada HealthBAA on: Enterprise partner deployments (health systems, payers)Some plans only
- Glass HealthBAA on: Glass Developer APISome plans only
- UpToDate Expert AIBAA on: Enterprise / institutional subscriptionSome plans only
- InfermedicaBAA on: Enterprise / API clients (health systems, payers, digital health)Signs a BAA
- OpenEvidenceBAA on: OpenEvidence accounts used by US covered entitiesSigns a BAA
- OverjetBAA on: Overjet customers under a Master Services AgreementSigns a BAA
All BAA-ready alternatives to Dyna AI (DynaMed)
Sources
- DynaMed Terms of Use (incl. AI Specific Annex)
- Dyna AI Now Available for DynaMedex and Dynamic Health
A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.