HIPAA compliant AI scribes? Which sign a BAA
AI scribes that turn visits into clinical notes — whether they sign a BAA, what happens to the recordings, and what clinicians need to check before using them with patients.
AI medical scribes at a glance
An AI scribe records the visit and drafts the note; using one with patients needs a BAA covering recording, transcript and note, a clear rule on how long audio is kept, and your review before signing. We compare 2 products in AI medical scribes. 2 sign a Business Associate Agreement (Freed, Heidi Health). Every value links to the vendor's own documentation and shows when it was checked.
| Sign a BAA | Freed, Heidi Health |
|---|---|
| Products compared | 2 |
| Compared on | BAA without a sales process, BAA on entry-level team plans |
2 more facts
| Commissions | None — no vendor pays us |
|---|---|
| Facts checked since | 2026-10-06 |
Comparison
Alphabetical. No vendor pays us for listings, rankings or referrals — methodology.
| Product | Signs a BAA | BAA without a sales process | BAA on entry-level team plans |
|---|---|---|---|
| Freed | Yes | Yes | Yes |
| Heidi Health | Yes | Not verified | Not verified |
Found an outdated or wrong fact? Report it
What to check before you choose
- A BAA that covers recording, transcript and note
- Check that the agreement covers each stage: audio capture, transcription, the generated note and any storage in between.
- What happens to the recording
- Is the audio deleted after the note is created, and can you set how long it is kept? A retained recording that identifies a patient is PHI.
- Use of your data to improve the product
- A BAA cannot permit the vendor to use PHI in ways the practice itself could not (164.504(e)(2)(i)). Check whether the vendor trains models on your data, and on what basis.
- Telling patients
- HIPAA does not require consent to a scribe, but state recording laws and professional rules may. Tell patients before the session and respect an objection.
- Review before signing
- The note is your record. Review and correct it before signing; the vendor's accuracy is not your safeguard.
Common mistakes
- Using a consumer AI note-taker that has no BAA.
- Signing generated notes without reading them.
- Running the scribe on a personal phone that is not protected like a work device.
How we compare
- BAA without a sales process
- You can put the BAA in place yourself — it is included in standard terms or accepted in account settings — rather than requesting it and waiting for approval.
- BAA on entry-level team plans
- The BAA is available on the vendor's entry-level business or team plan, not only on enterprise tiers.
Requirements behind these criteria
- Business associate agreements (BAAs) →§ 164.502(e)
- PHI and ePHI →§ 160.103
- De-identification →§ 164.514(a)