Is Viz.ai HIPAA compliant?
Viz.ai signs a Business Associate Agreement with its customers, which HIPAA requires before a vendor handles patient data for you. Once it's signed, you can use Viz.ai with patient data within the BAA's scope; whether your use is compliant still depends on your setup and your own policies. Viz.ai doesn't say whether the BAA covers all of its AI features.
Does Viz.ai sign a BAA?
Yes, it signs a BAA
Viz.ai's privacy policy says PHI in customer data is governed by a HIPAA BAA between the customer and Viz.ai, so hospital customers get a BAA through their contract. Its newer Viz Assist AI agents are not specifically mentioned.
Not confirmed for the AI features: Viz.ai doesn’t say whether its BAA covers Viz Assist (generative AI agents, ambient listening, patient summaries). Get that in writing before using it with patient data.
- Business associate
- Viz.ai
- Tool
- Viz.ai
- Plans with a BAA
- Enterprise platform subscription (hospitals and health systems)
- Checked
By plan
| Plan | BAA | How to get it | Conditions |
|---|---|---|---|
| Enterprise platform subscription (hospitals and health systems) | Signs a BAA | Through sales | PHI submitted through the platform services, including the Viz.ai mobile and web apps, is governed by the BAA between the customer and Viz.ai rather than the privacy policy. Sold through a customer agreement; no self-serve plan. The trust center lists HIPAA documentation and SOC 2 Type II.[1],[2],[3] |
Are the AI features covered?
Vendors often sign a BAA for the core product but leave some AI features out. Here is what Viz.ai says about each one.
| AI feature | Under the BAA | Details |
|---|---|---|
| Viz.ai One platform AI (imaging detection, triage, care coordination) | Covered | Viz.ai says PHI in customer data submitted through its platform services is governed by the customer BAA, and that the platform handles PHI for about 2,000 hospitals.[1],[2] |
| Viz Assist (generative AI agents, ambient listening, patient summaries) | Not stated | Launched October 2025. No official page names Viz Assist as within BAA scope; confirm in the customer agreement.[4] |
Sources
A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.