Is an AI phone agent HIPAA compliant, and do we need a BAA?
Short answerAn AI phone agent can be used in a HIPAA compliant way, but a vendor that creates, receives, maintains or transmits patient information for your center is a business associate, so you need a signed business associate agreement before any patient data moves.
What the HIPAA rules say
Under the HIPAA rules, a business associate is a person or company that, on behalf of a covered entity, "creates, receives, maintains, or transmits protected health information," and a subcontractor doing the same for a business associate is one too (45 CFR 160.103). A covered entity may let a business associate handle protected health information only with satisfactory assurances that it will safeguard it, documented in a written contract or other written agreement (45 CFR 164.502(e)).
What to ask every vendor
- Will you sign our BAA, or send yours, before go-live?
- Which subcontractors touch patient information (voice, transcription, texting, hosting, AI models), and do they all sign BAAs with you?
- What is logged, for how long, and who can see it?
- Do patients read insurance numbers aloud, or use a secure form?
- Can you share a security summary or SOC 2 report?
- How is our data returned or deleted if we leave?
On the vendor pages we checked, Hello Patient and Infinitus state that they sign BAAs. Others state HIPAA compliance or certifications without mentioning a BAA. See the line by line table. This page is not legal advice.
Our recommendation for surgery centers
Publisher's recommendation
A BAA is the floor, not a feature. Ava puts it in place before go-live and covers its subcontractors too, which is the standard we recommend every ASC demand from any vendor.
Follow-up questions
Is a vendor HIPAA compliant if it says so?
A claim on a website is not enough. Get the signed BAA and ask about subcontractors.
Does an answering service need a BAA?
Yes, if it handles patient information on your behalf.
Sources
Opened and checked . Statements about Ava come from Surgery Center Front Desk.