For small healthcare practices
Say yes to AI without putting patient data at risk
Your team is already using ChatGPT. The HIPAA AI Kit gives your practice written rules, a clear list of which tools can touch patient data, and a record that everyone signed.
Paid once. No subscription.
What you get
HIPAA AI policy written for your practice, saved with version history
Tool register showing which AI tools will sign a BAA, and on which plan
Staff sign-off links with a dated record of who signed
Printable evidence pack: policy, tool decisions and sign-offs in one place
Which AI tools will sign a BAA?
The tools practices ask us about most. Without a signed BAA, patient data must stay out.
- Is ChatGPT HIPAA compliant?ChatGPT offers a BAA. Usually only on ChatGPT Enterprise or another business plan, never a personal account. Sign it before any patient data goes in.BAA available
- Is Claude HIPAA compliant?Claude offers a BAA. Usually only on Claude Enterprise (Claude for Work) or another business plan, never a personal account. Sign it before any patient data goes in.BAA available
- Is Microsoft 365 Copilot HIPAA compliant?Microsoft 365 Copilot offers a BAA. Usually only on Microsoft 365 Copilot or another business plan, never a personal account. Sign it before any patient data goes in.BAA available
- Is Google Gemini HIPAA compliant?Google Gemini offers a BAA. Usually only on Google Workspace with Gemini (Business/Enterprise) or another business plan, never a personal account. Sign it before any patient data goes in.BAA available
- Is Otter.ai HIPAA compliant?Otter.ai offers a BAA. Usually only on Enterprise or another business plan, never a personal account. Sign it before any patient data goes in.BAA available
- Is Grammarly HIPAA compliant?Grammarly offers a BAA. Usually only on Enterprise or another business plan, never a personal account. Sign it before any patient data goes in.BAA available
- Is Notion AI HIPAA compliant?Notion AI offers a BAA. Usually only on Enterprise or another business plan, never a personal account. Sign it before any patient data goes in.BAA available
- Is Zoom AI Companion HIPAA compliant?We couldn't confirm a BAA from the vendor's own pages. Keep patient data out until you have one in writing.BAA unverified
How it works
Step 1
Write your policy
Start from the HIPAA preset. Pick the tools you allow and save it. About ten minutes.
Step 2
Mark your tools
Approve, restrict or prohibit each AI tool. We show which ones offer a BAA, so you know where patient data can go.
Step 3
Get sign-off, print the record
Send each person a link to read and confirm. Then print one page that shows all of it.
Questions practices ask
- Who is this for?
- Small practices, from solo therapists to clinics of around 50 people, where staff use AI tools and nobody has written down the rules yet.
- Does this make us HIPAA compliant?
- No product can do that on its own. The kit covers one gap most practices have: how staff use AI tools with patient data. It gives you written rules, a reason for each tool decision and proof that staff agreed.
- Is ChatGPT HIPAA compliant?
- Not the free or Plus version. OpenAI offers a BAA for its API and some business plans, and only that covered account can be used with PHI. The kit lists this for every tool we track, with the vendor source.
- Is it a subscription?
- No. You pay $99 once. Your workspace, policy versions and sign-off records stay with your account.
- Is this legal advice?
- No. It is guidance built from each vendor's published terms. Have your own advisor review the policy before you adopt it.
- Can I try it first?
- Yes. The policy generator, the healthcare preset and the tool facts are free with no account. The kit adds staff sign-off and the printable record.