Is Isabel DDx Companion HIPAA compliant?

Not for patient data. Isabel Healthcare doesn't sign a Business Associate Agreement for Isabel DDx Companion, and HIPAA requires one before a vendor handles PHI for you.

Does Isabel DDx Companion sign a BAA?

No BAA available

Isabel's terms and privacy policy say it does not collect or process PHI under HIPAA and prohibit users from providing PHI. No BAA is published, so don't enter identifiable patient information.

Based on 4 sources, all from Isabel Healthcare unless marked.

Business associate
Isabel Healthcare
Tool
Isabel DDx Companion
Plans with a BAA
None
Checked
No BAA
Isabel Healthcare won't sign a BAA for Isabel DDx Companion.

By plan

PlanBAAHow to get itConditions
Individual subscriptionNo BAANot offeredThe Terms (March 2024) state Isabel does not collect or process PHI and prohibit uploading or providing PHI. Enter only non-identifying clinical features (age, sex, symptoms).[1],[2]
Institutional / EHR-integrated (API, Cerner, Epic)No BAANot offeredThe same terms bar PHI across Isabel's platform and services. Institutional customers can pull clinical features from the EMR through Isabel's API, and the privacy policy allows separate customer agreements, but no published page mentions an institutional BAA. Confirm with Isabel before sending any identifiers.[1],[2],[3]

Are the AI features covered?

Vendors often sign a BAA for the core product but leave some AI features out. Here is what Isabel Healthcare says about each one.

AI featureUnder the BAADetails
Isabel AI Diagnosis Explained / Diagnosis Compare (ChatGPT-based)ExcludedAdded in October 2025 on top of the differential engine; desktop and English only. Isabel's terms prohibit PHI on its services, and the launch post says nothing about how inputs are handled by the LLM.[1],[4]

Clinical AI assistants that offer a BAA

  • Ada HealthBAA on: Enterprise partner deployments (health systems, payers)Some plans only
  • Glass HealthBAA on: Glass Developer APISome plans only
  • UpToDate Expert AIBAA on: Enterprise / institutional subscriptionSome plans only
  • InfermedicaBAA on: Enterprise / API clients (health systems, payers, digital health)Signs a BAA
  • OpenEvidenceBAA on: OpenEvidence accounts used by US covered entitiesSigns a BAA
  • OverjetBAA on: Overjet customers under a Master Services AgreementSigns a BAA

All BAA-ready alternatives to Isabel DDx Companion

Sources

  1. Terms of UseIsabel Healthcare, Legal terms. Checked Oct 13, 2026. Archived copy
  2. Privacy PolicyIsabel Healthcare, Legal terms. Checked Oct 13, 2026. Archived copy
  3. Isabel DDx CompanionIsabel Healthcare, Documentation. Checked Oct 13, 2026. Archived copy
  4. Introducing Isabel DDx Companion with LLM for cliniciansIsabel Healthcare, Documentation. Checked Oct 13, 2026. Archived copy

A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.