Is Pearl HIPAA compliant?
Not confirmed. We couldn't find a Business Associate Agreement offer on Pearl's own pages. Without a signed BAA, keep patient data out of it.
Does Pearl sign a BAA?
Not confirmed
Pearl's public pages mention HIPAA and SOC 2 but do not say Pearl signs a BAA with dental practices; product terms are in separate agreements that are not public. BAA availability for customers is unknown.
- Business associate
- Pearl
- Tool
- Pearl
- Plans with a BAA
- Not stated
- Checked
By plan
| Plan | BAA | How to get it | Conditions |
|---|---|---|---|
| Pearl customers (practice and DSO agreements) | Not confirmed | Not stated | The website terms say Pearl maintains SOC 2 Type II and HIPAA compliance and reference a Data Processing Addendum with customers where applicable, but products are governed by separate agreements not published. The privacy policy acknowledges patient data may be PHI but does not mention a BAA. A help article says Pearl holds BAAs with its AI infrastructure partners, which concerns Pearl's own vendors, not customers.[1],[2],[3] |
Are the AI features covered?
Vendors often sign a BAA for the core product but leave some AI features out. Here is what Pearl says about each one.
| AI feature | Under the BAA | Details |
|---|---|---|
| Second Opinion / Second Opinion 3D (radiograph and CBCT AI) | Not stated | No customer BAA is documented publicly. The privacy policy says AI output is reviewed by a dental professional and does not say whether patient data trains Pearl's models.[2] |
| Pearl Voice (ambient notes and perio charting) | Not stated | Pearl says it holds BAAs with the AI infrastructure partners behind Pearl Voice and that recordings stay within Pearl's infrastructure, but it does not publish whether it signs a BAA with the practice.[3] |
Clinical AI assistants that offer a BAA
- Ada HealthBAA on: Enterprise partner deployments (health systems, payers)Some plans only
- Glass HealthBAA on: Glass Developer APISome plans only
- UpToDate Expert AIBAA on: Enterprise / institutional subscriptionSome plans only
- InfermedicaBAA on: Enterprise / API clients (health systems, payers, digital health)Signs a BAA
- OpenEvidenceBAA on: OpenEvidence accounts used by US covered entitiesSigns a BAA
- OverjetBAA on: Overjet customers under a Master Services AgreementSigns a BAA
All BAA-ready alternatives to Pearl
Compare Pearl
- Overjet vs PearlOverjet: signs a BAA
Sources
A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.