ClickCease

Workspace is on sale for your first year. Use code FALL39

Start with Workspace

BUSINESS ASSOCIATE AGREEMENT

Looking for an AI scribe with a BAA?

If your clinical workflow involves protected health information, vendor agreements matter. Review AutoNotes' Business Associate Agreement and security resources as part of your organization's evaluation.

View AutoNotes BAA Visit Trust Center
81,000+ clinicians trust AutoNotes
Vendor compliance review Documentation & due diligence
Review checklist
LEGAL DOCUMENT Business Associate Agreement

Review agreement terms before sharing protected health information.

Vendor review areas 6 considerations
✓
Business associate status Confirm the vendor's role
✓
BAA requirements Review and execute as needed
✓
Data handling Processing, retention & subprocessors
✓
Security safeguards Access controls & protections
✓
Recording policies Consent & retention requirements
✓
Clinical oversight Note review & approval process

Why a BAA matters for AI documentation

01

Defines responsibilities

A BAA addresses permitted uses and disclosures of PHI and establishes contractual responsibilities between covered entities and business associates.

02

Supports vendor review

Your privacy and compliance team can assess the agreement alongside the vendor's security documentation and operational practices.

03

Is not the whole compliance picture

A signed BAA alone does not make every workflow HIPAA compliant. Configuration, policies, training, and appropriate use still matter.

A CLINICIAN-LED WORKFLOW

Questions to ask before using an AI scribe with PHI

From preparation to final documentation, AutoNotes fits into your existing clinical workflow. Review client context before the session, stay focused on care during the visit, and generate a structured note afterward. Simply review, make any necessary edits, and finalize the documentation for your clinical record.

AI Scribe Security Checklist Before sharing protected health information
6 Questions
Vendor review progress 0 of 6 reviewed

CONNECTED CLINICAL WORKFLOWS

Explore related workflows

HIPAA-Compliant AI Notes

Review privacy considerations across the full documentation workflow.

Explore HIPAA-Compliant AI Notes →

AI Scribe for Group Practices

Consider documentation workflows for clinicians and practice leaders.

Explore AI Scribe for Group Practices →

AI Scribe for Telehealth

Follow a documentation workflow that fits virtual care.

Explore AI Scribe for Telehealth →

Trust and clinical responsibility

AutoNotes is designed for behavioral health documentation workflows. Clinicians remain responsible for reviewing, correcting, and approving generated content before it enters the clinical record. For details on privacy practices, security, and applicable agreements, visit the Trust Center. Confirm plan-specific availability on the Pricing page.

FAQ

Frequently asked questions

More questions? Contact our team or visit the Help Center.

What does BAA stand for?

Business Associate Agreement. It is a contract used under HIPAA when a business associate handles PHI on behalf of a covered entity or another business associate.

Is a BAA required for every AI tool?

Not in every situation. The requirement depends on the parties' roles and whether the service involves PHI under HIPAA.

Does having a BAA mean an AI scribe is automatically compliant?

No. HIPAA obligations also involve security safeguards, appropriate uses and disclosures, policies, and actual operational practices.

Where can I find AutoNotes' BAA?