AI Vendor BAA CheckCheck your tool list

Is Infermedica HIPAA compliant?

Infermedica signs a Business Associate Agreement with its customers, which HIPAA requires before a vendor handles patient data for you. Once it's signed, you can use Infermedica with patient data within the BAA's scope; whether your use is compliant still depends on your setup and your own policies. Infermedica doesn't say whether the BAA covers its AI features.

Does Infermedica sign a BAA?

Yes, it signs a BAA

Infermedica's security portal lists HIPAA among its compliance items and offers a BAA template to business customers, so a BAA is available through an enterprise contract. Which products and AI features the BAA covers is not published.

Based on 4 sources, all from Infermedica unless marked.

Not confirmed for the AI features: Infermedica doesn’t say whether its BAA covers Certified AI Triage, Intake and Follow-up (symptom assessment); Conversational Triage and Voice Agent (agentic AI). Get that in writing before using them with patient data.

Business associate
Infermedica
Tool
Infermedica
Plans with a BAA
Enterprise / API clients (health systems, payers, digital health)
Checked
Signs a BAA
Infermedica signs a BAA with its customers; AI coverage isn't stated.

By plan

PlanBAAHow to get itConditions
Enterprise / API clients (health systems, payers, digital health)Signs a BAAThrough salesThe security portal (re-checked 2026-10-13) lists a 'BAA Template', an 'FAQ - API Clients in the USA' and a note on GDPR for US clients among its documents; portal access is granted on request for one month. The regulatory compliance page marks HIPAA as completed and says the solutions are designed to safeguard PHI. Infermedica sells through business contracts, not self-serve.[1],[2]

Are the AI features covered?

Vendors often sign a BAA for the core product but leave some AI features out. Here is what Infermedica says about each one.

AI featureUnder the BAADetails
Certified AI Triage, Intake and Follow-up (symptom assessment)Not statedThese are Infermedica's core products, but the scope of the BAA template is not public, so coverage is not confirmed per feature.[1],[3]
Conversational Triage and Voice Agent (agentic AI)Not statedNewer agentic products listed on the homepage; no official page ties them to the BAA.[3]

Sources

  1. Infermedica Security PortalInfermedica, Trust center. Checked Oct 13, 2026. Archived copy
  2. Regulatory complianceInfermedica, Documentation. Checked Oct 13, 2026. Archived copy
  3. InfermedicaInfermedica, Documentation. Checked Oct 13, 2026. Archived copy
  4. Privacy PolicyInfermedica, Legal terms. Checked Oct 13, 2026. Archived copy

Change history

  1. Infermedica — Enterprise / API clients (health systems, payers, digital health): updated conditions (our correction after re-checking the vendor's pages).

A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.