Does Synthflow sign a BAA?
Only on some plans or setups
Synthflow publishes a BAA that is executed at contract signing for customers who use its HIPAA Setting, which keeps PHI from being logged, recorded or stored. HIPAA appears under its sales-led Enterprise tier; no self-serve path or fee is published.
Not fully covered by the BAA: Call recordings, transcripts and logs containing PHI.
- Business associate
- Synthflow
- Tool
- Synthflow
- Plans with a BAA
- Enterprise (sales-led annual agreement)
- Checked
By plan
| Plan | BAA | How to get it | Conditions |
|---|---|---|---|
| Enterprise (sales-led annual agreement) | Conditions apply | Through salesRequest page | The BAA (v1.0, updated May 13, 2026) applies to customers using the HIPAA Setting, which is off by default and must be enabled by the customer for any workflow involving PHI; liability is limited to incidents where the setting was properly enabled. The healthcare page lists HIPAA compliance under the Enterprise pricing tier and routes buyers to sales. The contracting party named in the BAA is AgentFlow AI GmbH.[1],[2],[3] |
| Self-serve / non-Enterprise plans | Not confirmed | Not stated | No official page says whether non-Enterprise plans can get the BAA or use the HIPAA Setting.[2],[3] |
Are the AI features covered?
Vendors often sign a BAA for the core product but leave some AI features out. Here is what Synthflow says about each one.
| AI feature | Under the BAA | Details |
|---|---|---|
| Call recordings, transcripts and logs containing PHIEnterprise (sales-led annual agreement) | Excluded | Under the HIPAA Setting, PHI is held only in memory and deleted after processing, and is not logged, recorded or stored persistently. Persisting recordings or transcripts with PHI is therefore outside the BAA's HIPAA Setting.[1] |
| Underlying LLM, voice and telephony providersEnterprise (sales-led annual agreement) | Not stated | The BAA allows subcontractors without customer consent but does not name LLM, TTS, STT or telephony providers or say how they are covered.[1] |
AI voice agents that offer a BAA
- Assort HealthBAA on: Healthcare provider customer agreementsSome plans only
- Bland AIBAA on: Healthcare / Enterprise deploymentsSome plans only
- Twilio (Voice, ConversationRelay, Flex)BAA on: Security Edition or Enterprise EditionSome plans only
- VapiBAA on: Usage-only or any Success Package, with the HIPAA add-onSome plans only
- Amazon ConnectBAA on: Any AWS account that accepts the AWS BAASigns a BAA
- Google Cloud Contact Center AI / Customer Engagement SuiteBAA on: Google Cloud customers who accept the Google Cloud BAASigns a BAA
All BAA-ready alternatives to Synthflow
Sources
- Business Associate Agreement
- Voice AI for Healthcare Calls and Patient Support
- Enterprise (Synthflow docs)
A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.