Is Healthie AI HIPAA compliant?
Healthie Inc. signs a Business Associate Agreement with its customers, which HIPAA requires before a vendor handles patient data for you. Once it's signed, you can use Healthie AI with patient data within the BAA's scope; whether your use is compliant still depends on your setup and your own policies. Healthie Inc. doesn't say whether the BAA covers its AI features.
Does Healthie AI sign a BAA?
Yes, it signs a BAA
Healthie says it signs a BAA with its providers, and its published BAA takes effect when a Healthie account is created. Healthie says AI Scribe doesn't train on customer data, but it doesn't say in writing that the BAA covers AI Scribe.
Not confirmed for the AI features: Healthie Inc. doesn’t say whether its BAA covers AI Scribe (ambient session transcription and chart-note drafting). Get that in writing before using it with patient data.
- Business associate
- Healthie Inc.
- Tool
- Healthie AI
- Plans with a BAA
- Healthie plans (Plus, Group, Enterprise) with AI Scribe
- Checked
By plan
| Plan | BAA | How to get it | Conditions |
|---|---|---|---|
| Healthie plans (Plus, Group, Enterprise) with AI Scribe | Signs a BAA | Included in the termsRequest page | Healthie's FAQ and security help page say it signs a BAA with providers. The published BAA, effective May 25, 2018, is formed when the Healthie account is created. No page limits the BAA to particular plans. AI Scribe includes 40 hours a month shared across the team, with overages generally at $0.85 an hour; Enterprise pricing is by contact. Compliance questions go to compliance@gethealthie.com.[1],[2],[3],[4] |
Are the AI features covered?
Vendors often sign a BAA for the core product but leave some AI features out. Here is what Healthie Inc. says about each one.
| AI feature | Under the BAA | Details |
|---|---|---|
| AI Scribe (ambient session transcription and chart-note drafting) | Not stated | Healthie says AI Scribe runs in its HIPAA-compliant environment, the LLMs it uses are HIPAA-compliant, and session data never trains models, including subprocessors' models. Raw audio is not kept; transcripts are kept indefinitely unless the organization sets a retention window. Listed subprocessors are AWS, Zoom and Google Cloud. No page states that the BAA covers AI Scribe or names the LLM provider.[3],[5] |
Sources
- Business Associate Agreement
- Healthie Security and Privacy Certifications
- AI Scribe
- FAQ & Telehealth Platform Support
- AI Scribe FAQs
A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.