AI Vendor BAA CheckCheck your tool list

Is Fathom Health HIPAA compliant?

Not confirmed. We couldn't find a Business Associate Agreement offer for Fathom Health on Fathom's own pages. Without a signed BAA, keep patient data out of it.

Does Fathom Health sign a BAA?

Not confirmed

Fathom (fathomhealth.com) sells AI-driven autonomous medical coding to health systems, physician groups and health plans. Its security page cites HITRUST i1 and SOC 2 Type 2 and a third-party HIPAA audit, but no official page checked mentions a BAA, so BAA status is unknown. This is not the Fathom meeting note-taker.

Based on 4 sources, all from Fathom unless marked.

Business associate
Fathom
Tool
Fathom Health
Plans with a BAA
Not stated
Checked
Not confirmed
No BAA offer found on Fathom's own pages.

By plan

PlanBAAHow to get itConditions
Enterprise coding contracts (sales-led)Not confirmedNot statedFathom sells through demos, with no public plans. The security page, privacy policy and HITRUST press release do not mention a BAA. The privacy policy says customer service data is used only as its customer contracts allow and that the policy does not cover patient information.[1],[2],[3],[4]

Are the AI features covered?

Vendors often sign a BAA for the core product but leave some AI features out. Here is what Fathom says about each one.

AI featureUnder the BAADetails
Autonomous facility, professional and risk-adjustment codingNot statedNo page checked says whether the AI coding service is under a BAA, names a model provider, or says whether customer data is used to train models.[2],[3]

Revenue cycle and coding AI that offer a BAA

  • CodaMetrixBAA on: Health system contracts (sales-led)Signs a BAA

All BAA-ready alternatives to Fathom Health

Sources

  1. Fathom Advances Data Protection and Privacy in Autonomous Medical Coding with HITRUST i1 CertificationFathom (via Business Wire), Announcement. Checked Oct 13, 2026. Archived copy
  2. Fathom homepageFathom, Documentation. Checked Oct 13, 2026. Archived copy
  3. SecurityFathom, Trust center. Checked Oct 13, 2026. Archived copy
  4. Privacy PolicyFathom, Legal terms. Checked Oct 13, 2026. Archived copy

A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.