Evidence-first authority page
HIPAA-Compliant AI Agents: Directory and Verification Standard
A directory of AI agents verified as HIPAA-compliant against primary evidence, and the standard a product must meet to be listed here.
Direct answer
This page lists AI agents with a verified, signed Business Associate Agreement (BAA) availability and documented HIPAA-relevant controls from a primary source. No agent currently has a verified HIPAA-compliance receipt on file, so the directory below is empty rather than populated with unverified claims.
Last reviewed 2026-08-29
This page remains noindex while its page-level source receipts are completed and verified. It is available for review, not presented as publication-ready authority.
Why HIPAA claims get held to a high bar here
A false or unverified HIPAA compliance claim carries direct risk for anyone relying on it to handle protected health information — this is exactly the category of claim this site's CRITICAL evidence gate exists for, requiring multiple primary sources before publication. A vendor's marketing copy alone, without a documented Business Associate Agreement (BAA) offering, is not sufficient evidence for a listing here.
What HIPAA compliance actually requires
- A signed Business Associate Agreement (BAA) between the vendor and the covered entity — without a BAA, a vendor cannot be used to process protected health information (PHI) in a HIPAA-compliant way, regardless of its technical security posture.
- Documented technical safeguards specific to PHI handling — encryption at rest and in transit, access controls, and audit logging.
- A vendor's willingness to sign a BAA at all is itself informative — many general-purpose AI tools explicitly do not offer one, which means they cannot be used for PHI under HIPAA regardless of other security features.
How to verify before using a tool with health data
Ask the vendor directly whether they offer a BAA, request the current version, and confirm it names the specific product and data flows you intend to use — a BAA covering one product tier does not automatically extend to another tier or a related product from the same vendor.