HIPAA Compliance
Last updated: October 12, 2026
When PatientCalls.AI answers the phone for your practice, patients share protected health information (PHI): names, dates of birth, appointment details and the reasons they are calling. Under HIPAA, that makes PatientCalls your business associate, and we take that responsibility seriously. This page explains how HIPAA applies to a service like ours and how to get the details your practice needs.
Business Associate Agreement (BAA)
HIPAA requires a Business Associate Agreement between a practice and any vendor that handles its patients’ information. The BAA sets out how the vendor may use patient information, how it must protect it, and what happens if something goes wrong. Contact us to review a BAA for your practice.
Only what the call needs
The AI receptionist collects only what is needed to handle the call, such as the patient’s name, callback number and reason for calling.
If something goes wrong
HIPAA requires a business associate to report a breach of unsecured patient information to the practice without unreasonable delay, and no later than 60 days after discovering it.
Working together
HIPAA compliance is shared between a practice and its vendors. Your practice remains responsible for:
- Deciding which staff receive call summaries, messages and transcripts.
- Keeping the logins to your PatientCalls.AI account and your EMR secure.
- Telling us when staff leave, so their access can be removed.
About “HIPAA certified”
There is no official government certification for HIPAA. The U.S. Department of Health and Human Services does not certify companies. Our HIPAA Compliant seal means we follow the HIPAA Privacy, Security and Breach Notification Rules that apply to us as a business associate.
About this website
- The demo request form is for contact details only. Please don’t include patient information in your message: the form is not used to handle PHI.
- The call samples are demonstration calls recorded by our team with a fictional practice and fictional patients. They contain no real patient information.
- How we handle information collected by this website is explained in our Privacy Policy.
Request our BAA or security overview
For our Business Associate Agreement, a security overview, or answers to your compliance questions, email info@patientcalls.com, or book a demo and ask us directly.
This page is general information for practices evaluating PatientCalls.AI. Our Business Associate Agreement and service agreement set out the binding terms.