Is Thoughtful AI HIPAA compliant?
Not confirmed. We couldn't find a Business Associate Agreement offer for Thoughtful AI on Thoughtful AI (Smarter Technologies)'s own pages. Without a signed BAA, keep patient data out of it.
Does Thoughtful AI sign a BAA?
Not confirmed
Thoughtful AI made AI agents for medical billing tasks and is now part of Smarter Technologies; its website now redirects to SmarterDx. No official page checked mentions a BAA for Thoughtful AI, so BAA status is unknown.
- Business associate
- Thoughtful AI (Smarter Technologies)
- Tool
- Thoughtful AI
- Plans with a BAA
- Not stated
- Checked
By plan
| Plan | BAA | How to get it | Conditions |
|---|---|---|---|
| Provider and RCM contracts (sales-led, now via SmarterDx / Smarter Technologies) | Not confirmed | Not stated | thoughtful.ai and its subpages now redirect to smarterdx.com, so Thoughtful AI no longer has its own official pages. The SmarterDx privacy policy says the company holds PHI as a business associate of enterprise customers and that customer agreements govern that data, but it never mentions a BAA. Smarter Technologies' site does not mention HIPAA or a BAA.[1],[2],[3] |
Are the AI features covered?
Vendors often sign a BAA for the core product but leave some AI features out. Here is what Thoughtful AI (Smarter Technologies) says about each one.
| AI feature | Under the BAA | Details |
|---|---|---|
| AI agents for billing work (eligibility, prior authorization, claims) | Not stated | The SmarterDx platform page now lists a SmarterAuthorizations module but does not mention Thoughtful AI by name. No page checked says whether these AI agents are under a BAA or names a model provider.[1],[4] |
Revenue cycle and coding AI that offer a BAA
- CodaMetrixBAA on: Health system contracts (sales-led)Signs a BAA
All BAA-ready alternatives to Thoughtful AI
Sources
- Smarter Technologies' Acquisitions Strengthen AI-Powered RCM Solutions
- Privacy Policy
- SmarterDx homepage (redirect target of thoughtful.ai)
- Platform
A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.