Is S10.AI HIPAA compliant?
S10.AI signs a Business Associate Agreement with its customers, which HIPAA requires before a vendor handles patient data for you. Once it's signed, you can use S10.AI with patient data within the BAA's scope; whether your use is compliant still depends on your setup and your own policies. S10.AI doesn't say whether the BAA covers its AI features.
Does S10.AI sign a BAA?
Yes, it signs a BAA
S10.AI's website footer says a BAA is available on request, and a December 2025 S10 blog post says a BAA comes with each account. Its Terms and Privacy Policy don't mention a BAA, and it doesn't publish the request process, BAA text or eligible plans.
Not confirmed for the AI features: S10.AI doesn’t say whether its BAA covers CRUSH ambient AI scribe and telehealth scribing. Get that in writing before using it with patient data.
- Business associate
- S10.AI
- Tool
- S10.AI
- Plans with a BAA
- S10.AI scribe (per-provider subscription)
- Checked
By plan
| Plan | BAA | How to get it | Conditions |
|---|---|---|---|
| S10.AI scribe (per-provider subscription) | Signs a BAA | Not stated | The site-wide footer says HIPAA and GDPR controls are in production and a BAA is available on request; a December 2025 S10 blog post instead says a BAA is provided automatically with any account at no extra cost. The Terms and Privacy Policy (both updated April 19, 2026) don't mention a BAA in their text. No request form, email address or plan restriction is published, and the footer says the SOC 2 Type II audit is still in progress.[1],[2],[3] |
Are the AI features covered?
Vendors often sign a BAA for the core product but leave some AI features out. Here is what S10.AI says about each one.
| AI feature | Under the BAA | Details |
|---|---|---|
| CRUSH ambient AI scribe and telehealth scribing | Not stated | S10.AI does not name its AI model providers or subprocessors on any page checked, and no published BAA text was found, so whether third-party model processing is inside BAA coverage could not be confirmed.[1],[4],[2] |
Sources
- S10.AI homepage
- BAA for your AI notes tool: do you need one?
- Business Associate Agreement (BAA) for AI Medical Scribes
- Privacy Policy
- Terms and Conditions
Change history
- S10.AI — S10.AI scribe (per-provider subscription): updated how to get the BAA, conditions (our correction after re-checking the vendor's pages).
A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.