Is Waystar AltitudeAI HIPAA compliant?
Not confirmed. We couldn't find a Business Associate Agreement offer for Waystar AltitudeAI on Waystar's own pages. Without a signed BAA, keep patient data out of it.
Does Waystar AltitudeAI sign a BAA?
Not confirmed
Waystar is a healthcare payments and claims platform whose AltitudeAI features draft appeal letters, write claim rules and support clinical documentation work. Waystar acquired Iodine Software in October 2025, and Iodine's CDI product is now sold as Waystar Clinical Documentation Integrity. No official page checked mentions a BAA, so BAA status is unknown.
- Business associate
- Waystar
- Tool
- Waystar AltitudeAI
- Plans with a BAA
- Not stated
- Checked
By plan
| Plan | BAA | How to get it | Conditions |
|---|---|---|---|
| Waystar platform customers (providers, sales-led) | Not confirmed | Not stated | Waystar sells through demos, and customers sign a separate subscriber or membership agreement. The privacy policy has a HIPAA section about Waystar's role as a claims clearinghouse but does not mention business associates or a BAA. The website terms cover only the public site.[1],[2],[3] |
Are the AI features covered?
Vendors often sign a BAA for the core product but leave some AI features out. Here is what Waystar says about each one.
| AI feature | Under the BAA | Details |
|---|---|---|
| AltitudeAI (AltitudeCreate appeal letters, AltitudeAssist claim rules) | Not stated | Waystar's blog says these generative AI features are built with security frameworks and AI guardrails. No page checked names an LLM provider or says whether the AI is under a BAA.[4],[1] |
| Waystar Clinical Documentation Integrity (formerly Iodine AwareCDI), incl. QueryAgent | Not stated | The CDI page says the product is powered by AltitudeAI and includes a generative AI QueryAgent that drafts physician queries. It makes no HIPAA or BAA statement. Iodine's old domain now redirects to waystar.com.[5],[6],[7] |
Revenue cycle and coding AI that offer a BAA
- CodaMetrixBAA on: Health system contracts (sales-led)Signs a BAA
All BAA-ready alternatives to Waystar AltitudeAI
Sources
- Privacy Policy
- Waystar homepage
- Terms + Conditions
- 4 innovations in healthcare RCM from the Waystar Innovation Showcase
- Clinical Documentation Integrity
- Waystar Closes Acquisition of Iodine Software, Extending AI Leadership in Healthcare Software
- Iodine Software introduces AwareUM
A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.