Is Rad AI HIPAA compliant?

Not confirmed. We couldn't find a Business Associate Agreement offer on Rad AI's own pages. Without a signed BAA, keep patient data out of it.

Does Rad AI sign a BAA?

Not confirmed

Rad AI says it holds a SOC 2 Type II HIPAA+ attestation and has a radiology de-identification pipeline, but no official page states that it signs BAAs or how to request one. BAA availability is unknown.

Based on 3 sources, all from Rad AI unless marked.

Business associate
Rad AI
Tool
Rad AI
Plans with a BAA
Not stated
Checked
Not confirmed
No BAA offer found on Rad AI's own pages.

By plan

PlanBAAHow to get itConditions
Enterprise (radiology practices and health systems)Not confirmedNot statedThe security page cites a SOC 2 Type II HIPAA+ attestation and says policies are available on request. The website privacy policy covers only website and marketing data. No official page mentions a BAA; ask Rad AI sales.[1],[2]

Are the AI features covered?

Vendors often sign a BAA for the core product but leave some AI features out. Here is what Rad AI says about each one.

AI featureUnder the BAADetails
Rad AI Reporting (Omni Report generation, AI impressions)Not statedGenerative AI drafts full reports and impressions from dictation, working with PACS, RIS and EHR. No official page addresses BAA coverage.[3]
Rad AI Continuity (follow-up recommendation tracking)Not statedNo official page addresses BAA coverage.[1]

Clinical AI assistants that offer a BAA

  • Ada HealthBAA on: Enterprise partner deployments (health systems, payers)Some plans only
  • Glass HealthBAA on: Glass Developer APISome plans only
  • UpToDate Expert AIBAA on: Enterprise / institutional subscriptionSome plans only
  • InfermedicaBAA on: Enterprise / API clients (health systems, payers, digital health)Signs a BAA
  • OpenEvidenceBAA on: OpenEvidence accounts used by US covered entitiesSigns a BAA
  • OverjetBAA on: Overjet customers under a Master Services AgreementSigns a BAA

All BAA-ready alternatives to Rad AI

Sources

  1. SecurityRad AI, Trust center. Checked Oct 13, 2026. Archived copy
  2. Privacy PolicyRad AI, Legal terms. Checked Oct 13, 2026. Archived copy
  3. Rad AI ReportingRad AI, Documentation. Checked Oct 13, 2026. Archived copy

A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.