Is VisualDx HIPAA compliant?
Not confirmed. We couldn't find a Business Associate Agreement offer on VisualDx's own pages. Without a signed BAA, keep patient data out of it.
Does VisualDx sign a BAA?
Not confirmed
VisualDx publishes no BAA and its terms, EULA and privacy policy don't mention HIPAA or PHI. It says its AI skin-image analysis collects no patient-identifiable information and doesn't store or send images to VisualDx. BAA availability is unknown.
- Business associate
- VisualDx
- Tool
- VisualDx
- Plans with a BAA
- Not stated
- Checked
By plan
| Plan | BAA | How to get it | Conditions |
|---|---|---|---|
| Individual / small group subscription | Not confirmed | Not stated | No official page mentions a BAA. The EULA (Feb 2023), Terms of Use (2017) and Privacy Policy (July 2026) say nothing about HIPAA or PHI and neither allow nor forbid entering patient data.[1],[2],[3] |
| VisualDx Enterprise (institutional, EHR-integrated) | Not confirmed | Not stated | Enterprise supports EHR integration via SMART on FHIR and HL7 Infobutton, which brings in patient context such as problem and medication lists. No official page says whether a BAA comes with institutional contracts; ask VisualDx.[4] |
Are the AI features covered?
Vendors often sign a BAA for the core product but leave some AI features out. Here is what VisualDx says about each one.
| AI feature | Under the BAA | Details |
|---|---|---|
| AI image analysis (DermExpert skin-lesion recognition) | Not stated | VisualDx says the feature is designed to support HIPAA compliance: no patient-identifiable data is collected, the image is deleted right after analysis, and images are not sent to VisualDx servers or used for training. No BAA is mentioned.[4],[5] |
| AI-assisted differential diagnosis (EHR patient context)VisualDx Enterprise (institutional, EHR-integrated) | Not stated | Patient context pulled from the EHR feeds the diagnostic workup, but no official page addresses BAA coverage for it.[4] |
Clinical AI assistants that offer a BAA
- Ada HealthBAA on: Enterprise partner deployments (health systems, payers)Some plans only
- Glass HealthBAA on: Glass Developer APISome plans only
- UpToDate Expert AIBAA on: Enterprise / institutional subscriptionSome plans only
- InfermedicaBAA on: Enterprise / API clients (health systems, payers, digital health)Signs a BAA
- OpenEvidenceBAA on: OpenEvidence accounts used by US covered entitiesSigns a BAA
- OverjetBAA on: Overjet customers under a Master Services AgreementSigns a BAA
All BAA-ready alternatives to VisualDx
Sources
- VisualDx Privacy Policy
- VisualDx End User License Agreement
- VisualDx Terms of Use
- VisualDx FAQ
- Is DermExpert HIPAA compliant?
A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.