Is eClinicalWorks AI HIPAA compliant?
eClinicalWorks, LLC signs a Business Associate Agreement with its customers, which HIPAA requires before a vendor handles patient data for you. Once it's signed, you can use eClinicalWorks AI with patient data within the BAA's scope; whether your use is compliant still depends on your setup and your own policies. eClinicalWorks, LLC doesn't say whether the BAA covers its AI features.
Does eClinicalWorks AI sign a BAA?
Yes, it signs a BAA
eClinicalWorks publishes the BAA it signs with customers, with eClinicalWorks acting as business associate. The BAA doesn't mention AI, and no eCW page says whether its AI tools or the Azure OpenAI models behind some of them are covered.
Not confirmed for the AI features: eClinicalWorks, LLC doesn’t say whether its BAA covers AI Assistant, Image AI (fax routing), healowIQ, No-Show prediction, PRISMA AI; healow Genie (AI contact center for patient calls). Get that in writing before using them with patient data.
- Business associate
- eClinicalWorks, LLC
- Tool
- eClinicalWorks AI
- Plans with a BAA
- eClinicalWorks EHR / practice management customers
- Checked
By plan
| Plan | BAA | How to get it | Conditions |
|---|---|---|---|
| eClinicalWorks EHR / practice management customers | Signs a BAA | Through salesRequest page | eCW publishes a customer BAA template (version v20250228) with signature blocks for both parties, in which eClinicalWorks acts as business associate. eCW may change it on its own where needed for compliance. It lets eCW use de-identified or aggregated data for testing, product improvement and other lawful purposes. The terms of use also refer to BAAs signed between eCW and providers.[1],[2] |
Are the AI features covered?
Vendors often sign a BAA for the core product but leave some AI features out. Here is what eClinicalWorks, LLC says about each one.
| AI feature | Under the BAA | Details |
|---|---|---|
| AI Assistant, Image AI (fax routing), healowIQ, No-Show prediction, PRISMA AI | Not stated | eCW lists these AI tools as part of its EHR. Neither the BAA nor the AI pages say whether the BAA covers them. A 2023 eCW release says it uses Azure OpenAI Service models and ChatGPT, but does not say whether Microsoft is under a BAA for this use.[1],[3],[4] |
| healow Genie (AI contact center for patient calls) | Not stated | healow is an eCW affiliate. eCW's terms of use extend to affiliated services such as healow, but no page says whether healow Genie runs under eCW's BAA or needs a separate agreement.[2],[3] |
Sources
- eClinicalWorks HIPAA Business Associate Agreement (Customer, v20250228)
- eClinicalWorks Terms of Use Agreement
- Meet Your AI-powered EHR
- eClinicalWorks Brings ChatGPT and AI Models into EHR and Practice Management Solution
A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.