HIPAA compliant AI tools
Therapists, clinics and anyone handling patient information need more than a privacy promise: HIPAA coverage normally means a signed Business Associate Agreement (BAA), and it is often limited to an enterprise plan or an add on. 55 tools in the catalog state HIPAA compliance or a BAA on their own pages. Recording consent is a separate obligation that stays with you.
| Tool | Category | What the tool says | Source |
|---|---|---|---|
| Ada | Customer Service | Ada holds SOC 2 Type II and HIPAA certifications and operates in compliance with GDPR. | Page |
| Aikido Security | Coding and App Builders | An audit grade report, usable for SOC2, ISO27001, HIPAA Compliance,... | Page |
| Airtable | Meetings and Productivity | HIPAA Compliance NEW | Page |
| Akkio | Data, Finance and Legal | Akkio utilizes enterprise grade best practices to protect our customers' sensitive health information, and uses Drata to verify… | Page |
| Anyword | Writing | Anyword meets SOC 2, ISO 27001, GDPR, and HIPAA requirements — ensuring your data and content are protected at every step. | Page |
| Arize AI | Agents and Automation | Arize supports flexible deployment options and is certified to leading security and compliance standards, including SOC 2 Type… | Page |
| Asana | Meetings and Productivity | HIPAA Protection of patient health information in the United States | Page |
| Avoma | Meetings and Productivity | Strict compliance and advanced access controls for enterprises. Everything in Organization, plus: Minimum 10 Paid Seats Global… | Page |
| Bland AI | Customer Service | Bland holds SOC 2 Type I and Type II, HIPAA, and PCI DSS certifications. | Page |
| Bluedot | Meetings and Productivity | HIPAA training conducted Human resource security policy established Information security program established | Page |
| Braintrust | Agents and Automation | Business associate agreement (BAA)Required for HIPAA compliance when your AI system handles protected health information (PHI).… | Page |
| Browser Use | Agents and Automation | HIPAA mode is a setting on an enterprise project. We turn it on for you as part of an enterprise agreement. | Page |
| Cal.com | Meetings and Productivity | ask us for a Business Associate Agreement (available on Teams plans and up; email privacy@cal.com or ask support or sales) | Page |
| Chatbase | Customer Service | HIPAA support for eligible Enterprise workspaces provide a clear foundation for secure deployment. | Page |
| Claude | Meetings and Productivity | The HIPAA configuration is an organization setting on Enterprise plans. It brings local Claude Code and Claude Cowork sessions,… | Page |
| Claude Code | Coding and App Builders | The HIPAA configuration is an organization setting on Enterprise plans. It brings local Claude Code and Claude Cowork sessions,… | Page |
| ClickUp | Meetings and Productivity | MSA & HIPAA Available | Page |
| Clio | Data, Finance and Legal | Manage medical records, damages, and settlements, with HIPAA compliance included. | Page |
| ElevenLabs | Voice and Audio | BAAs for HIPAA customers | Page |
| EvenUp | Data, Finance and Legal | SOC2 audited and HIPAA attested | Page |
| Fathom | Meetings and Productivity | SOC 2 Type II / GDPR / HIPAA Compliant / SSO / SCIM | Page |
| Gong | Sales and Lead Gen | Gong helps you stay HIPAA compliant | Page |
| Goodcall | Customer Service | To use Goodcall with protected health information, choose the Scale plan or Enterprise and sign our Business Associate Agreement… | Page |
| Grammarly | Meetings and Productivity | With HIPAA compliance and enterprise grade security features, MemorialCare has complete confidence in the tool’s ability to… | Page |
| Granola | Meetings and Productivity | HIPAA compliant workspaces | Page |
| Helicone | Agents and Automation | SOC 2 & HIPAA compliance | Page |
| Hex | Data, Finance and Legal | We are audited annually for SOC 2 Type II and HIPAA compliance and are dedicated to safeguarding your data. | Page |
| Intercom | Customer Service | Every Advanced feature, plus: SSO & identity management HIPAA support | Page |
| Krisp | Meetings and Productivity | BAA signing available (Available for teams with 100+ seats) | Page |
| Lindy | Meetings and Productivity | HIPAA compliance & signed BAA | Page |
| MeetGeek | Meetings and Productivity | HIPAA (via Business Associate Agreement). We are able to sign Business Associate Agreements in support of customers’ compliance… | Page |
| Murf AI | Voice and Audio | Built to the highest security standards: SOC 2, ISO 27001, GDPR, and HIPAA compliance, to keep your data safe. | Page |
| My AI Front Desk | Customer Service | HIPAA compliant Handle sensitive conversations with signed BAAs, encryption in transit and at rest, and strict access controls. | Page |
| Notta | Meetings and Productivity | Follow HIPAA guidelines to safeguard the privacy and security of individuals’ medical records and health information. | Page |
| Otter.ai | Meetings and Productivity | HIPAA compliance (add on) | Page |
| Paxton AI | Data, Finance and Legal | Paxton prioritizes security, having achieved SOC 2 compliance, adhering to ISO standards, and complying with HIPAA regulations | Page |
| Pipedream | Agents and Automation | Pipedream can sign Business Associate Addendum (BAAs) for customers intending to pass PHI to Pipedream. | Page |
| Read AI | Meetings and Productivity | Read AI meets HIPAA's technical safeguard requirements for protected health information. Healthcare and human services teams can… | Page |
| Retell AI | Customer Service | Fully compliant with HIPAA, SOC2 Type II, GDPR and ISO 27001. | Page |
| Rev | Voice and Audio | Enterprise/Unlimited is the only tier with HIPAA or CJIS compliance. | Page |
| Sapling | Detectors and Humanizers | If you need a self hosted solution or a BAA for HIPAA compliance, please also contact sales@sapling.ai for custom pricing. | Page |
| SiteGPT | Customer Service | Assessed by DPLMC International for compliance with HIPAA security and privacy requirements. Safeguards in place for Protected… | Page |
| Skyvern | Agents and Automation | Enterprise — HIPAA, SOC 2, dedicated support | Page |
| Sonix | Voice and Audio | HIPAA compliance & a signed BAA on Enterprise | Page |
| Speak AI | Marketing | BAA, NDA, and custom agreements Dedicated account manager Data residency options | Page |
| Spellbook | Data, Finance and Legal | Spellbook can review and agree to a BAA with customers to help maintain HIPAA compliance for legal use cases involving PHI. | Page |
| Superhuman Docs | Meetings and Productivity | HIPAA compliance / Contact sales | Page |
| Synthflow | Customer Service | Synthflow’s infrastructure is certified across SOC 2, HIPAA, PCI DSS, and GDPR | Page |
| Tidio | Customer Service | checkSOC 2 & HIPAA compliance | Page |
| Vapi | Customer Service | HIPAA is available as a paid compliance add on with Usage only or any Success Package. | Page |
| WellSaid | Voice and Audio | soc2 hipaa gdpr hitech | Page |
| Wispr Flow | Voice and Audio | Sign a Business Associate Agreement to enable HIPAA support for dictation, on any plan. Enterprise admins can enforce it org wide. | Page |
| Wix | Coding and App Builders | For healthcare professionals, use built in tools and a BAA to make your website HIPAA compliant, ensuring patient data stays… | Page |
| Writesonic | Writing | SSO/SAML, SOC 2 Type II, HIPAA, GDPR | Page |
| Zendesk AI | Customer Service | Ability to configure for HIPAA | Page |
Ask the vendor for the BAA before you record anything with patient information.