A signed BAA, automatically
Aide is a HIPAA Business Associate to every practice it serves. Rather than a separate contract to chase down, Aide’s Business Associate Agreement applies automatically the moment a practice creates an account — no back-and-forth required before you can start using the product with real patient data. Every practice can review the exact terms, or get a personalized, dated copy for their own compliance file, at any time.
Safeguards in place
- Implement administrative, physical, and technical safeguards to protect PHI from unauthorized use or disclosure
- Encrypt PHI in transit using TLS 1.2 or higher and at rest using AES-256 encryption
- Maintain role-based access controls limiting PHI access to authorized personnel only
- Conduct regular security risk assessments and remediate identified vulnerabilities
- Maintain audit logs of access to PHI and review them regularly
- Ensure all workforce members receive HIPAA privacy and security training
Subprocessors are under BAAs too
Every vendor Aide relies on that touches PHI — including voice AI, hosting, and the practice-management integration — is bound by its own BAA with Aide, consistent with HIPAA’s requirements for subcontractors. Aide remains responsible for those vendors’ handling of PHI. The full, current list is public.
Questions
For compliance questions, a copy of the BAA for your records, or to report a potential incident, email support@useaide.app.