HIPAA compliant AI receptionist

Business Associate Agreement

When a covered entity, such as a medical, dental, therapy or veterinary practice handling human health information, uses Agent Help to answer patient calls, Agent Help acts as a business associate under HIPAA. We sign a Business Associate Agreement before any protected health information (PHI) is processed. To request one, mention it when you book your demo.

How call data is protected

• Encryption of call audio, transcripts and records in transit and at rest.
• Role-based access, so only authorized users on your account can view call data.
• Audit logging of access to records.
• Minimum necessary collection: the agent only collects what you configure it to.
• Vendor agreements with sub-processors that handle PHI.

What you control

You approve the script, the questions the agent asks and what it may discuss. Clinical advice stays with your clinicians: the agent books, routes and takes messages, and transfers anything clinical to your team.

Your responsibilities

HIPAA compliance is shared. Your practice remains responsible for its own policies, patient notices and for limiting account access to the right staff. We are happy to walk your compliance lead through our setup.

Questions

What PHI does the AI receptionist handle?

Only what is needed to complete the call, such as a caller's name, contact details, appointment time and reason for visit. You decide what the agent is allowed to collect and discuss.

Who can access call recordings and transcripts?

Only authorized users on your account and the Agent Help staff who need access to support you. Access is role-based and logged.