Is Waystar AltitudeAI HIPAA compliant?

Not confirmed. We couldn't find a Business Associate Agreement offer for Waystar AltitudeAI on Waystar's own pages. Without a signed BAA, keep patient data out of it.

Does Waystar AltitudeAI sign a BAA?

Not confirmed

Waystar is a healthcare payments and claims platform whose AltitudeAI features draft appeal letters, write claim rules and support clinical documentation work. Waystar acquired Iodine Software in October 2025, and Iodine's CDI product is now sold as Waystar Clinical Documentation Integrity. No official page checked mentions a BAA, so BAA status is unknown.

Based on 7 sources, all from Waystar unless marked.

Business associate
Waystar
Tool
Waystar AltitudeAI
Plans with a BAA
Not stated
Checked
Not confirmed
No BAA offer found on Waystar's own pages.

By plan

PlanBAAHow to get itConditions
Waystar platform customers (providers, sales-led)Not confirmedNot statedWaystar sells through demos, and customers sign a separate subscriber or membership agreement. The privacy policy has a HIPAA section about Waystar's role as a claims clearinghouse but does not mention business associates or a BAA. The website terms cover only the public site.[1],[2],[3]

Are the AI features covered?

Vendors often sign a BAA for the core product but leave some AI features out. Here is what Waystar says about each one.

AI featureUnder the BAADetails
AltitudeAI (AltitudeCreate appeal letters, AltitudeAssist claim rules)Not statedWaystar's blog says these generative AI features are built with security frameworks and AI guardrails. No page checked names an LLM provider or says whether the AI is under a BAA.[4],[1]
Waystar Clinical Documentation Integrity (formerly Iodine AwareCDI), incl. QueryAgentNot statedThe CDI page says the product is powered by AltitudeAI and includes a generative AI QueryAgent that drafts physician queries. It makes no HIPAA or BAA statement. Iodine's old domain now redirects to waystar.com.[5],[6],[7]

Revenue cycle and coding AI that offer a BAA

  • CodaMetrixBAA on: Health system contracts (sales-led)Signs a BAA

All BAA-ready alternatives to Waystar AltitudeAI

Sources

  1. Privacy PolicyWaystar, Legal terms. Checked Oct 13, 2026. Archived copy
  2. Waystar homepageWaystar, Documentation. Checked Oct 13, 2026. Archived copy
  3. Terms + ConditionsWaystar, Legal terms. Checked Oct 13, 2026. Archived copy
  4. 4 innovations in healthcare RCM from the Waystar Innovation ShowcaseWaystar, Documentation. Checked Oct 13, 2026. Archived copy
  5. Clinical Documentation IntegrityWaystar, Documentation. Checked Oct 13, 2026. Archived copy
  6. Waystar Closes Acquisition of Iodine Software, Extending AI Leadership in Healthcare SoftwareWaystar, Announcement. Checked Oct 13, 2026. Archived copy
  7. Iodine Software introduces AwareUMWaystar (archived Iodine Software release), Announcement. Checked Oct 13, 2026. Archived copy

A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.