Is Overjet HIPAA compliant?
Overjet signs a Business Associate Agreement, which HIPAA requires before a vendor handles patient data for you. Once it's signed, you can use Overjet with patient data within the BAA's scope; whether your use is compliant still depends on your setup and your own policies.
Does Overjet sign a BAA?
Yes, it signs a BAA
Overjet publishes a Business Associate Agreement that takes effect with a customer's Master Services Agreement, so contracted dental practices are covered by a BAA. Its trust center lists Anthropic, OpenAI and Deepgram among its subprocessors.
Not fully covered by the BAA: Voice notes and LLM features.
- Business associate
- Overjet
- Tool
- Overjet
- Plans with a BAA
- Overjet customers under a Master Services Agreement
- Checked
By plan
| Plan | BAA | How to get it | Conditions |
|---|---|---|---|
| Overjet customers under a Master Services Agreement | Signs a BAA | Through sales | The published BAA between Overjet, Inc. and the customer is effective as of the MSA's effective date and applies to the 'Covered Services' named in the MSA or order form. It requires written agreements with any subcontractor handling PHI. The customer must not give PHI to Overjet personnel outside the Covered Services. Overjet holds HITRUST certification.[1],[2] |
Are the AI features covered?
Vendors often sign a BAA for the core product but leave some AI features out. Here is what Overjet says about each one.
| AI feature | Under the BAA | Details |
|---|---|---|
| Radiograph AI detection and measurement | Covered | Overjet's core imaging AI is the contracted service; PHI processed through Covered Services falls under the BAA.[1],[2] |
| Voice notes and LLM features | Partly covered | Subprocessors listed include Anthropic (backend LLM processing), OpenAI (voice notes templates) and Deepgram (voice transcription). The BAA requires subcontractor agreements, but the trust center cites DPAs with subprocessors and does not say each AI subprocessor has signed a BAA; coverage depends on whether these features are Covered Services in the customer's order form.[1],[2] |
Compare Overjet
- Overjet vs PearlPearl: not confirmed
Sources
A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.