Does Sully.ai sign a BAA?
Yes, it signs a BAA
Sully.ai says it signs a BAA with every covered entity, to be executed before Sully is used with PHI. The site does not describe plans or the process for getting one, and the only route shown is booking a demo.
- Business associate
- Sully.ai
- Tool
- Sully.ai
- Plans with a BAA
- Healthcare organization customers (demo / sales-led)
- Checked
Signs a BAA
By plan
| Plan | BAA | How to get it | Conditions |
|---|---|---|---|
| Healthcare organization customers (demo / sales-led) | Signs a BAA | Not stated | The help center says Sully provides a BAA for covered entities and business associates to execute before using it with ePHI. The trust page says it executes BAAs with every covered entity. No plan tiers or request process are published, and the only call to action is 'Book a demo'.[1],[2],[3] |
Are the AI features covered?
Vendors often sign a BAA for the core product but leave some AI features out. Here is what Sully.ai says about each one.
| AI feature | Under the BAA | Details |
|---|---|---|
| AI scribe and AI agents ("AI employees") | Covered | The BAA is executed before the product is used with ePHI, and the product is AI-based. The trust page says PHI is not used for model training without explicit consent, and an unnamed LLM provider runs under zero-retention terms.[1],[2] |
Sources
- Is Sully.ai HIPAA Compliant? How Patient Data is Protected
- Sully.ai Trust
- Are AI scribes HIPAA compliant?
A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.