Does Hippocratic AI sign a BAA?
Not confirmed
Hippocratic AI sells clinical voice AI agents to health systems, payors and pharma and claims HIPAA, HITRUST and SOC 2 credentials, but none of its pages that could be read say it signs a BAA. BAA availability is unknown.
- Business associate
- Hippocratic AI
- Tool
- Hippocratic AI
- Plans with a BAA
- Not stated
- Checked
Not confirmed
By plan
| Plan | BAA | How to get it | Conditions |
|---|---|---|---|
| Enterprise deployments (health systems, payors, pharma) | Not confirmed | Not stated | Hippocratic AI is sold through 'Book A Meeting' and 'Contact Us', with no self-serve plan. Its site claims HIPAA compliance and HITRUST and SOC 2 certifications, but no readable official page mentions a BAA.[1],[2],[3],[4] |
Are the AI features covered?
Vendors often sign a BAA for the core product but leave some AI features out. Here is what Hippocratic AI says about each one.
| AI feature | Under the BAA | Details |
|---|---|---|
| Clinical voice AI agents (patient calls: scheduling, outreach, post-discharge follow-up) | Not stated | The agents handle patient calls, and the HITRUST release refers to safeguarding PHI. No page states BAA coverage for any feature.[1],[2],[3] |
AI voice agents that offer a BAA
- Assort HealthBAA on: Healthcare provider customer agreementsSome plans only
- Bland AIBAA on: Healthcare / Enterprise deploymentsSome plans only
- SynthflowBAA on: Enterprise (sales-led annual agreement)Some plans only
- Twilio (Voice, ConversationRelay, Flex)BAA on: Security Edition or Enterprise EditionSome plans only
- VapiBAA on: Usage-only or any Success Package, with the HIPAA add-onSome plans only
- Amazon ConnectBAA on: Any AWS account that accepts the AWS BAASigns a BAA
All BAA-ready alternatives to Hippocratic AI
Sources
- Why Hippocratic AI
- Hippocratic AI Achieves HITRUST e1 Certification for Full Agentic Platform
- Hippocratic AI Achieves SOC for Service Organizations Report
- Hippocratic AI
A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.