Is Isabel DDx Companion HIPAA compliant?
Not for patient data. Isabel Healthcare doesn't sign a Business Associate Agreement for Isabel DDx Companion, and HIPAA requires one before a vendor handles PHI for you.
Does Isabel DDx Companion sign a BAA?
No BAA available
Isabel's terms and privacy policy say it does not collect or process PHI under HIPAA and prohibit users from providing PHI. No BAA is published, so don't enter identifiable patient information.
- Business associate
- Isabel Healthcare
- Tool
- Isabel DDx Companion
- Plans with a BAA
- None
- Checked
By plan
| Plan | BAA | How to get it | Conditions |
|---|---|---|---|
| Individual subscription | No BAA | Not offered | The Terms (March 2024) state Isabel does not collect or process PHI and prohibit uploading or providing PHI. Enter only non-identifying clinical features (age, sex, symptoms).[1],[2] |
| Institutional / EHR-integrated (API, Cerner, Epic) | No BAA | Not offered | The same terms bar PHI across Isabel's platform and services. Institutional customers can pull clinical features from the EMR through Isabel's API, and the privacy policy allows separate customer agreements, but no published page mentions an institutional BAA. Confirm with Isabel before sending any identifiers.[1],[2],[3] |
Are the AI features covered?
Vendors often sign a BAA for the core product but leave some AI features out. Here is what Isabel Healthcare says about each one.
| AI feature | Under the BAA | Details |
|---|---|---|
| Isabel AI Diagnosis Explained / Diagnosis Compare (ChatGPT-based) | Excluded | Added in October 2025 on top of the differential engine; desktop and English only. Isabel's terms prohibit PHI on its services, and the launch post says nothing about how inputs are handled by the LLM.[1],[4] |
Clinical AI assistants that offer a BAA
- Ada HealthBAA on: Enterprise partner deployments (health systems, payers)Some plans only
- Glass HealthBAA on: Glass Developer APISome plans only
- UpToDate Expert AIBAA on: Enterprise / institutional subscriptionSome plans only
- InfermedicaBAA on: Enterprise / API clients (health systems, payers, digital health)Signs a BAA
- OpenEvidenceBAA on: OpenEvidence accounts used by US covered entitiesSigns a BAA
- OverjetBAA on: Overjet customers under a Master Services AgreementSigns a BAA
All BAA-ready alternatives to Isabel DDx Companion
Sources
- Terms of Use
- Privacy Policy
- Isabel DDx Companion
- Introducing Isabel DDx Companion with LLM for clinicians
A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.