Is VisualDx HIPAA compliant?

Not confirmed. We couldn't find a Business Associate Agreement offer on VisualDx's own pages. Without a signed BAA, keep patient data out of it.

Does VisualDx sign a BAA?

Not confirmed

VisualDx publishes no BAA and its terms, EULA and privacy policy don't mention HIPAA or PHI. It says its AI skin-image analysis collects no patient-identifiable information and doesn't store or send images to VisualDx. BAA availability is unknown.

Based on 5 sources, all from VisualDx unless marked.

Business associate
VisualDx
Tool
VisualDx
Plans with a BAA
Not stated
Checked
Not confirmed
No BAA offer found on VisualDx's own pages.

By plan

PlanBAAHow to get itConditions
Individual / small group subscriptionNot confirmedNot statedNo official page mentions a BAA. The EULA (Feb 2023), Terms of Use (2017) and Privacy Policy (July 2026) say nothing about HIPAA or PHI and neither allow nor forbid entering patient data.[1],[2],[3]
VisualDx Enterprise (institutional, EHR-integrated)Not confirmedNot statedEnterprise supports EHR integration via SMART on FHIR and HL7 Infobutton, which brings in patient context such as problem and medication lists. No official page says whether a BAA comes with institutional contracts; ask VisualDx.[4]

Are the AI features covered?

Vendors often sign a BAA for the core product but leave some AI features out. Here is what VisualDx says about each one.

AI featureUnder the BAADetails
AI image analysis (DermExpert skin-lesion recognition)Not statedVisualDx says the feature is designed to support HIPAA compliance: no patient-identifiable data is collected, the image is deleted right after analysis, and images are not sent to VisualDx servers or used for training. No BAA is mentioned.[4],[5]
AI-assisted differential diagnosis (EHR patient context)VisualDx Enterprise (institutional, EHR-integrated)Not statedPatient context pulled from the EHR feeds the diagnostic workup, but no official page addresses BAA coverage for it.[4]

Clinical AI assistants that offer a BAA

  • Ada HealthBAA on: Enterprise partner deployments (health systems, payers)Some plans only
  • Glass HealthBAA on: Glass Developer APISome plans only
  • UpToDate Expert AIBAA on: Enterprise / institutional subscriptionSome plans only
  • InfermedicaBAA on: Enterprise / API clients (health systems, payers, digital health)Signs a BAA
  • OpenEvidenceBAA on: OpenEvidence accounts used by US covered entitiesSigns a BAA
  • OverjetBAA on: Overjet customers under a Master Services AgreementSigns a BAA

All BAA-ready alternatives to VisualDx

Sources

  1. VisualDx Privacy PolicyVisualDx, Legal terms. Checked Oct 13, 2026. Archived copy
  2. VisualDx End User License AgreementVisualDx, Legal terms. Checked Oct 13, 2026. Archived copy
  3. VisualDx Terms of UseVisualDx, Legal terms. Checked Oct 13, 2026. Archived copy
  4. VisualDx FAQVisualDx, Help center. Checked Oct 13, 2026. Archived copy
  5. Is DermExpert HIPAA compliant?VisualDx, Help center. Checked Oct 13, 2026. Archived copy

A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.