Can I use a vendor while waiting for BAA verification?

PHI should not be used with a vendor until BAA verification is complete and a signed BAA is in place. Non-PHI workflows may proceed with appropriate controls while verification is underway.

What is a healthcare vendor watchlist?

A healthcare vendor watchlist is a curated list of software platforms and technology vendors that require elevated governance attention due to BAA status uncertainty, PHI exposure risk, AI data usage risk, tracking risk, or other compliance considerations.

Why are AI tools placed on a watchlist?

AI tools are placed on watchlists when they process PHI, lack verified BAAs, use customer data for model training, or are consumer-grade tools being used in clinical or administrative workflows where patient data may be exposed.

Does being on a watchlist mean a vendor is unsafe?

No. Being on a VNDRIQ watchlist means the vendor requires active governance attention — not that it is definitively unsafe. Many watchlist vendors can be used appropriately with the right controls, BAA execution, and configuration.

What does BAA verification needed mean?

"BAA Verification Needed" means VNDRIQ has not independently confirmed a current, executed BAA with this vendor. Organizations must verify BAA availability directly with the vendor before processing PHI.

How often should vendor risk be reviewed?

VNDRIQ recommends quarterly reviews for high-risk vendors, semiannual reviews for medium-risk vendors, and annual reviews for lower-risk operational tools. Any significant product update, acquisition, or policy change should trigger an ad-hoc review.

Can consumer AI tools be used with PHI?

Consumer AI tools are generally not recommended for PHI use. Consumer tiers typically do not offer BAAs, and data may be used for model training. Enterprise-tier products from the same vendors may offer appropriate compliance pathways but must be evaluated separately.

High RiskBAA RiskUpdated 2026-06-01

BAA Verification Needed

Many vendors in this watchlist provide enterprise products that may support HIPAA-compliant use — but only after direct BAA execution and configuration verification. Organizations should not assume BAA availability without written confirmation from the vendor.

Watchlist Stats

Risk Score80/100

Live Vendors386

Risk LevelHigh

Who Should Review

Compliance teams, legal counsel, IT directors, and procurement leadership.

Why This Watchlist Matters

Using a vendor without a verified BAA while processing PHI may constitute a HIPAA violation.

BAA availability changes as vendors update their compliance programs.

BAA scope limitations may mean some services are not covered even when a BAA exists.

Assumed BAAs are not valid — written confirmation is required.

Vendor Table — 386 of 386 vendors

Vendor	Category	BAA Status	Approval Tier	PHI Risk	AI Risk	Last Verified
Parallel	Healthcare Administrative AI	Verify Directly	Restricted / Review Required	Medium	Medium	—
Healthtech-1	Healthcare Administrative AI	Verify Directly	Restricted / Review Required	Medium	Medium	—
Latent	Healthcare Administrative AI	Verify Directly	Restricted / Review Required	Medium	Medium	2026-09-30
CombineHealth	Revenue Cycle AI	Verify Directly	Restricted / Review Required	Medium	Medium	—
HealthSpark	Revenue Cycle AI	Verify Directly	Restricted / Review Required	Medium	Medium	—
FutureClinic	Telehealth	Verify Directly	Restricted / Review Required	Medium	Medium	—
Quill Bills	Revenue Cycle AI	Verify Directly	Restricted / Review Required	Medium	Medium	—
Dodo	Patient Communication AI	Verify Directly	Restricted / Review Required	Medium	Medium	2026-09-15
Sage Care	Healthcare Administrative AI	Verify Directly	Restricted / Review Required	Medium	Medium	2026-09-16
Pharos	Healthcare Administrative AI	Verify Directly	Restricted / Review Required	Medium	Medium	2026-10-01
Kivo Health	Telehealth	Verify Directly	Restricted / Review Required	Medium	Medium	—
Vera Health	Clinical Intelligence AI	Verify Directly	Restricted / Review Required	Medium	Medium	2026-09-16
Wattson Health	Patient Communication AI	Verify Directly	Restricted / Review Required	Medium	Medium	—
Durate	Healthcare Administrative AI	Verify Directly	Restricted / Review Required	Medium	Medium	2026-08-31
Sohar Health	Revenue Cycle AI	Verify Directly	Restricted / Review Required	Medium	Medium	—
Decoda Health	EHR / Practice Management	Verify Directly	Restricted / Review Required	Medium	Medium	—
Health Harbor	Revenue Cycle AI	Verify Directly	Restricted / Review Required	Medium	Medium	2026-09-15
Clearest Health	Revenue Cycle AI	Verify Directly	Restricted / Review Required	Medium	Medium	—
Elythea	Clinical Intelligence AI	Verify Directly	Restricted / Review Required	Medium	Medium	2026-09-15
Shasta Health	Patient Communication AI	Verify Directly	Restricted / Review Required	Medium	Medium	2026-10-01
Penciled	Patient Communication AI	Verify Directly	Restricted / Review Required	Medium	Medium	2026-10-01
Andy AI	AI Scribes	Verify Directly	Restricted / Review Required	Medium	Medium	—
Pelica	Healthcare Administrative AI	Verify Directly	Restricted / Review Required	Medium	Medium	2026-09-01
Aegis	Revenue Cycle AI	Verify Directly	Restricted / Review Required	Medium	Medium	—
Adentris	Revenue Cycle AI	Verify Directly	Restricted / Review Required	Medium	Medium	2026-09-30
Harbera	Healthcare Administrative AI	Verify Directly	Restricted / Review Required	Medium	Medium	—
HealthKey	Healthcare Administrative AI	Verify Directly	Restricted / Review Required	Medium	Medium	—
Careforce	Healthcare Administrative AI	Verify Directly	Restricted / Review Required	Medium	Medium	2026-08-31
Syntra	Revenue Cycle AI	Verify Directly	Restricted / Review Required	Medium	Medium	2026-10-01
Planbase	Healthcare Administrative AI	Verify Directly	Restricted / Review Required	Medium	Medium	—
Cair Health	Revenue Cycle AI	Verify Directly	Restricted / Review Required	Medium	Medium	2026-09-30
Locata	Healthcare Administrative AI	Verify Directly	Restricted / Review Required	Medium	Medium	—
Phases	Healthcare Administrative AI	Verify Directly	Restricted / Review Required	Medium	Medium	2026-09-16
Perspectives Health	Clinical Intelligence AI	Verify Directly	Restricted / Review Required	Medium	Medium	—
Trapeze	Patient Communication AI	Verify Directly	Restricted / Review Required	Medium	Medium	—
ClaimGlide	Revenue Cycle AI	Verify Directly	Restricted / Review Required	Medium	Medium	—
Kaigo Health	Patient Communication AI	Verify Directly	Restricted / Review Required	Medium	Medium	—
LunaBill	Revenue Cycle AI	Verify Directly	Restricted / Review Required	Medium	Medium	2026-09-30
Avelis Health	Revenue Cycle AI	Verify Directly	Restricted / Review Required	Medium	Medium	—
Toothy AI	Revenue Cycle AI	Verify Directly	Restricted / Review Required	Medium	Medium	—
Scribeberry	AI Scribes	Verify Directly	Restricted / Review Required	Medium	Medium	2026-10-01
Eleos Health	Clinical Intelligence AI	Verify Directly	Restricted / Review Required	Medium	Medium	2026-09-30
Tennr	Healthcare Administrative AI	Verify Directly	Restricted / Review Required	Medium	Medium	—
AZmed	Medical Imaging AI	Verify Directly	Restricted / Review Required	Medium	Medium	2026-09-30
Aiforia	Digital Pathology AI	Verify Directly	Restricted / Review Required	Medium	Medium	2026-09-30
Anomaly	Revenue Cycle AI	Verify Directly	Restricted / Review Required	Medium	Medium	2026-09-30
Klarify	AI Scribes	Verify Directly	Restricted / Review Required	Medium	Medium	2026-09-30
Patientdesk.ai	Dental Receptionist AI	Verify Directly	Restricted / Review Required	Medium	Medium	—
Mango Medical	Medical Imaging AI	Verify Directly	Restricted / Review Required	Medium	Medium	—
Ritivel	Healthcare Administrative AI	Verify Directly	Restricted / Review Required	Medium	Medium	2026-10-01
Weave	Patient Communication	Verify Directly	Restricted / Review Required			2026-09-16
Zocdoc	Scheduling	Verify Directly	Restricted / Review Required			2026-10-01
UpToDate (Wolters Kluwer)	Clinical Intelligence AI	Verify Directly	Restricted / Review Required			—
Lyra Health	Telehealth	Verify Directly	Restricted / Review Required			2026-09-30
Claroty	Cybersecurity	Verify Directly	Restricted / Review Required			2026-09-30
Phreesia	Patient Intake	Verify Directly	Restricted / Review Required			—
eClinicalWorks	EHR / EMR	Verify Directly	Restricted / Review Required			—
Rivet Health	Revenue Cycle	Verify Directly	Restricted / Review Required			2026-08-17
Solv	Patient Engagement	Verify Directly	Restricted / Review Required			—
Codoxo	Revenue Cycle	Verify Directly	Restricted / Review Required			2026-08-31
Medigate	Cybersecurity	Verify Directly	Restricted / Review Required			—
Solutionreach	Patient Communication	Verify Directly	Restricted / Review Required			—
Monitaur	AI Infrastructure	Verify Directly	Restricted / Review Required			—
Spring Health	Telehealth	Verify Directly	Restricted / Review Required			2026-10-01
VideaHealth	Dental Imaging AI	Verify Directly	Restricted / Review Required			2026-09-01
Epic Systems	EHR / EMR	Verify Directly	Restricted / Review Required			2026-08-31
Suki AI	AI Scribes	Verify Directly	Restricted / Review Required			—
Ordr	Cybersecurity	Verify Directly	Restricted / Review Required			2026-10-01
CareNotes.ai	Ambient Clinical Documentation	Verify Directly	Restricted / Review Required			2026-09-30
Talkspace	Telehealth	Verify Directly	Restricted / Review Required			2026-10-01
Qure.ai	Imaging AI	Verify Directly	Restricted / Review Required			2026-10-01
Zebra Medical Vision	Imaging AI	Verify Directly	Restricted / Review Required			2026-10-01
Waystar	Revenue Cycle	Verify Directly	Restricted / Review Required			2026-08-18
Riverain Technologies	Imaging AI	Verify Directly	Restricted / Review Required			—
Credo AI	AI Infrastructure	Verify Directly	Restricted / Review Required			2026-09-15
Sarvam AI	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	—
Synthesia	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	—
Bria AI	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	—
HyperCLOVA X	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	—
Sakana AI	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	—
LG EXAONE	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	—
Upstage	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	2026-10-01
Lightricks	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	—
Huawei Pangu	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	—
Xiaomi MiMo	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	—
01.AI (Yi)	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	2026-08-12
Ant Group BaiLing	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	—
Huawei ModelArts	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	—
Baichuan	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	—
SenseNova	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	—
StepFun	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	—
iFlytek Spark	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	—
Youdao Ziyue	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	—
OPPO AndesGPT	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	—
Core42	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	—
JD JoyAI	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	—
Skywork AI	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	—
Jais	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	—
Black Forest Labs	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	2026-08-31
Vivo BlueLM	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	—
LightOn	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	—
Z.ai (GLM)	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	—
Tencent Hunyuan	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	—
ByteDance Doubao	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	—
Alibaba Cloud Model Studio	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	2026-09-30
Baidu Qianfan	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	—
ByteDance Seed	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	—
Tencent Cloud TI Platform	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	—
Moonshot AI (Kimi)	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	—
MiniMax	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	—
Volcano Engine Ark	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	—
ElevenLabs	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	2026-09-30
DeepSeek	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	—
Falcon (TII)	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	—
Baidu ERNIE	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	—
Cohere	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	2026-09-30
Mistral AI	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	2026-10-01
Aleph Alpha	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	—
Alibaba Qwen	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	2026-08-31
Stability AI	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	—
AI21 Labs	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	—
Notable	Healthcare Administrative AI	Verify Directly	Conditional / Verify BAA	High	Medium	2026-09-16
SuperDial	Healthcare Administrative AI	Verify Directly	Restricted / Review Required	High	High	2026-10-01
Infinitus	Healthcare Administrative AI	Verify Directly	Conditional / Verify BAA	High	Medium	2026-09-30
Hyro	Healthcare Administrative AI	Verify Directly	Conditional / Verify BAA	High	Medium	2026-08-13
Tandem Health	Ambient Clinical Documentation	Verify Directly	Conditional / Verify BAA	Critical	High	2026-09-16
SPRY	Ambient Clinical Documentation	Verify Directly	Restricted / Review Required	High	High	2026-10-01
Glass Health	Clinical Intelligence AI	Verify Directly	Restricted / Review Required	Critical	High	2026-09-30
ZenSupplies	Dental Practice Management Systems	Verify Directly	Conditional / Verify BAA	Low	Low	—
Grin	Dental Imaging AI	Verify Directly	Conditional / Verify BAA	High	High	—
Reputation.com Healthcare	Review Management	Verify Directly	Conditional / Verify BAA	High	Medium	2026-09-16
Dialpad Healthcare	Phones & Call Tracking	Verify Directly	Conditional / Verify BAA	High	High	2026-09-30
Experian Health	Revenue Cycle	Verify Directly	Conditional / Verify BAA	Critical	Low	—
Cherry	Payment / Billing	Verify Directly	Conditional / Verify BAA	High	Low	—
Change Healthcare / Optum	Revenue Cycle	Verify Directly	Conditional / Verify BAA	Critical	Low	—
Nexa Healthcare	Patient Communication	Verify Directly	Conditional / Verify BAA	High	Medium	—
Doctible	Patient Engagement	Verify Directly	Conditional / Verify BAA	High	Medium	—
Rhinogram	Secure Messaging	Verify Directly	Conditional / Verify BAA	High	Low	—
Optum Insight	Revenue Cycle	Verify Directly	Conditional / Verify BAA	Critical	Medium	2026-09-01
GoTo Connect Healthcare	Phones & Call Tracking	Verify Directly	Conditional / Verify BAA	High	Low	2026-09-30
Sunbit	Payment / Billing	Verify Directly	Conditional / Verify BAA	High	Low	—
Kleer	Payment / Billing	Verify Directly	Conditional / Verify BAA	High	Low	—
Scorpion Healthcare	Marketing	Verify Directly	Conditional / Verify BAA	High	Low	—
RingCentral for Healthcare	Phones & Call Tracking	Verify Directly	Conditional / Verify BAA	High	Medium	2026-10-01
SmileSnap	Patient Engagement	Verify Directly	Conditional / Verify BAA	High	Medium	—
Rectangle Health	Payment / Billing	Verify Directly	Conditional / Verify BAA	High	Low	2026-10-01
Proceed Finance	Payment / Billing	Verify Directly	Conditional / Verify BAA	High	Low	—
InstaMed	Payment / Billing	Verify Directly	Conditional / Verify BAA	High	Low	2026-09-30
Denefits	Payment / Billing	Verify Directly	Conditional / Verify BAA	High	Low	—
Zocdoc	Scheduling	Verify Directly	Conditional / Verify BAA	High	Low	—
Dental Intelligence	Analytics	Verify Directly	Conditional / Verify BAA	Critical	Medium	2026-09-15
Kyruus Health	Patient Engagement	Verify Directly	Conditional / Verify BAA	High	Low	2026-08-31
CareCredit	Payment / Billing	Verify Directly	Conditional / Verify BAA	High	Low	—
Healthgrades Marketplace	Marketing	Verify Directly	Conditional / Verify BAA	High	Low	—
Method Procurement	Dental Practice Management Systems	Verify Directly	Conditional / Verify BAA	Low	Low	—
Podium	Review Management	Verify Directly	Conditional / Verify BAA	High	Medium	2026-09-01
Sowingo	Dental Practice Management Systems	Verify Directly	Conditional / Verify BAA	Low	Low	—
Torch Dental	Dental Practice Management Systems	Verify Directly	Conditional / Verify BAA	Low	Low	—
Availity	Revenue Cycle	Verify Directly	Conditional / Verify BAA	Critical	Low	2026-09-15
Cedar	Payment / Billing	Verify Directly	Conditional / Verify BAA	High	Low	2026-08-31
Flywire Healthcare	Payment / Billing	Verify Directly	Conditional / Verify BAA	High	Low	2026-09-30
Legwork	Marketing	Verify Directly	Conditional / Verify BAA	High	Low	2026-08-13
Birdeye	Review Management	Verify Directly	Conditional / Verify BAA	High	Medium	2026-09-30
rater8	Review Management	Verify Directly	Conditional / Verify BAA	High	Medium	2026-10-01
Mango Voice	Phones & Call Tracking	Verify Directly	Conditional / Verify BAA	High	Low	—
DentalMonitoring	Dental Imaging AI	Verify Directly	Conditional / Verify BAA	High	High	2026-09-30
Relatient	Patient Engagement	Verify Directly	Conditional / Verify BAA	High	Low	2026-10-01
Modento	Patient Engagement	Verify Directly	Conditional / Verify BAA	High	Low	—
Doctor.com	Marketing	Verify Directly	Conditional / Verify BAA	High	Low	—
LocalMed	Scheduling	Verify Directly	Conditional / Verify BAA	High	Low	2026-09-15
Zelis	Revenue Cycle	Verify Directly	Conditional / Verify BAA	Critical	Low	2026-08-18
WebMD Ignite	Marketing	Verify Directly	Conditional / Verify BAA	High	Low	—
Sprinklr Healthcare	Marketing	Verify Directly	Conditional / Verify BAA	High	High	2026-10-01
Waystar	Revenue Cycle	Verify Directly	Conditional / Verify BAA	Critical	Low	2026-09-01
Jarvis Analytics	Analytics	Verify Directly	Conditional / Verify BAA	Critical	Medium	—
Simplifeye	Patient Communication	Verify Directly	Conditional / Verify BAA	High	Low	—
Alphaeon Credit	Payment / Billing	Verify Directly	Conditional / Verify BAA	High	Low	—
Practice by Numbers	Analytics	Verify Directly	Conditional / Verify BAA	Critical	Low	2026-09-16
Yapi	Patient Engagement	Verify Directly	Conditional / Verify BAA	High	Low	—
athenahealth	EHR / Practice Management	Verify Directly	Conditional / Verify BAA	Critical	Medium	2026-09-15
Practice Fusion	EHR / Practice Management	Verify Directly	Conditional / Verify BAA	Critical	Low	—
Jane App	EHR / Practice Management	Verify Directly	Conditional / Verify BAA	Critical	Low	2026-09-30
Kareo / Tebra	EHR / Practice Management	Verify Directly	Conditional / Verify BAA	Critical	Low	2026-09-15
EMA by ModMed	EHR / Practice Management	Verify Directly	Conditional / Verify BAA	Critical	Low	2026-08-31
Clearwave	Patient Intake	Verify Directly	Conditional / Verify BAA	High	Low	2026-09-30
Elation Health	EHR / Practice Management	Verify Directly	Conditional / Verify BAA	Critical	Low	2026-09-30
Greenway Health	EHR / Practice Management	Verify Directly	Conditional / Verify BAA	Critical	Low	2026-09-15
eClinicalWorks	EHR / Practice Management	Verify Directly	Conditional / Verify BAA	Critical	Medium	2026-09-15
NextGen Healthcare	EHR / Practice Management	Verify Directly	Conditional / Verify BAA	Critical	Medium	2026-09-16
DrChrono	EHR / Practice Management	Verify Directly	Conditional / Verify BAA	Critical	Low	2026-09-30
ModMed	EHR / Practice Management	Verify Directly	Conditional / Verify BAA	Critical	Medium	—
Simple Interact	Patient Intake	Verify Directly	Conditional / Verify BAA	High	Low	—
Nextech	EHR / Practice Management	Verify Directly	Conditional / Verify BAA	Critical	Low	—
ChiroTouch	EHR / Practice Management	Verify Directly	Conditional / Verify BAA	Critical	Low	2026-08-13
AdvancedMD	EHR / Practice Management	Verify Directly	Conditional / Verify BAA	Critical	Low	2026-08-13
Solutionreach	Patient Engagement	Verify Directly	Conditional / Verify BAA	High	Low	—
RevenueWell	Patient Engagement	Verify Directly	Conditional / Verify BAA	High	Low	—
Veeam	Backup & Disaster Recovery	Verify Directly	Conditional / Verify BAA	High	Low	2026-09-01
TherapyNotes	EHR / Practice Management	Verify Directly	Conditional / Verify BAA	High	Low	2026-10-01
TheraNest	EHR / Practice Management	Verify Directly	Conditional / Verify BAA	High	Low	2026-10-01
Paubox Email	HIPAA Email	Verify Directly	Conditional / Verify BAA	High	Low	2026-10-01
Datto Kaseya	Backup & Disaster Recovery	Verify Directly	Conditional / Verify BAA	High	Low	2026-08-13
PandaDoc	eSignature	Verify Directly	Conditional / Verify BAA	High	Low	2026-10-01
Health Catalyst	Healthcare Analytics	Verify Directly	Conditional / Verify BAA	Critical	Medium	2026-09-15
Adobe Acrobat Sign	eSignature	Verify Directly	Conditional / Verify BAA	High	Low	2026-09-30
Dentrix Ascend	Dental Cloud PMS	Verify Directly	Conditional / Verify BAA	Critical	Low	2026-08-13
LuxSci Email	HIPAA Email	Verify Directly	Conditional / Verify BAA	High	Low	2026-09-30
Arcadia	Healthcare Analytics	Verify Directly	Conditional / Verify BAA	Critical	Low	2026-09-30
tab32	Dental Cloud PMS	Verify Directly	Conditional / Verify BAA	Critical	Low	2026-10-01
Zix OpenText	Email Security	Verify Directly	Conditional / Verify BAA	High	Low	2026-09-01
Druva	Backup & Disaster Recovery	Verify Directly	Conditional / Verify BAA	High	Low	2026-09-15
Curve Dental	Dental Cloud PMS	Verify Directly	Conditional / Verify BAA	Critical	Low	—
1upHealth	Healthcare API / Interoperability	Verify Directly	Conditional / Verify BAA	Critical	Low	2026-09-30
OperaDDS	Patient Engagement	Verify Directly	Conditional / Verify BAA	High	Low	—
Archy Dental	Dental Cloud PMS	Verify Directly	Conditional / Verify BAA	Critical	Medium	2026-09-30
Open Dental Cloud	Dental Cloud PMS	Verify Directly	Conditional / Verify BAA	Critical	Low	2026-09-16
Dropbox Sign	eSignature	Verify Directly	Conditional / Verify BAA	High	Low	2026-09-30
Acronis Cyber Protect	Backup & Disaster Recovery	Verify Directly	Conditional / Verify BAA	High	Low	2026-09-15
Human API	Healthcare API / Interoperability	Verify Directly	Conditional / Verify BAA	Critical	Low	2026-09-15
Mimecast	Email Security	Verify Directly	Conditional / Verify BAA	High	Low	2026-09-01
Health Gorilla	Healthcare API / Interoperability	Verify Directly	Conditional / Verify BAA	Critical	Low	2026-09-30
Weave	Patient Engagement	Verify Directly	Conditional / Verify BAA	High	Low	—
Innovaccer	Healthcare Analytics	Verify Directly	Conditional / Verify BAA	Critical	Medium	2026-09-30
Proofpoint	Email Security	Verify Directly	Conditional / Verify BAA	High	Low	2026-09-16
SendGrid	API Communications	Verify Directly	Restricted / Review Required	High	Low	2026-10-01
Redox	Healthcare API / Interoperability	Verify Directly	Conditional / Verify BAA	Critical	Low	2026-10-01
Vyne Dental	Revenue Cycle	Verify Directly	Conditional / Verify BAA	Critical	Low	2026-09-01
Overjet	Dental AI Imaging	Verify Directly	Conditional / Verify BAA	Critical	High	2026-09-01
OhMD	Secure Messaging	Verify Directly	Conditional / Verify BAA	High	Low	2026-10-01
VideaHealth	Dental AI Imaging	Verify Directly	Conditional / Verify BAA	Critical	High	—
Lighthouse 360	Patient Engagement	Verify Directly	Conditional / Verify BAA	High	Low	—
Virtru	Email Security	Verify Directly	Conditional / Verify BAA	High	Low	2026-10-01
DentalXChange	Revenue Cycle	Verify Directly	Conditional / Verify BAA	Critical	Low	2026-09-15
Particle Health	Healthcare API / Interoperability	Verify Directly	Conditional / Verify BAA	Critical	Low	2026-10-01
Zus Health	Healthcare Data Platform	Verify Directly	Conditional / Verify BAA	Critical	Low	2026-10-01
DocuSign	eSignature	Verify Directly	Conditional / Verify BAA	High	Low	2026-09-30
Luma Health	Patient Engagement	Verify Directly	Conditional / Verify BAA	High	Low	2026-09-30
CareStack	Dental Cloud PMS	Verify Directly	Conditional / Verify BAA	Critical	Low	2026-09-30
Bola AI	Dental Voice AI	Verify Directly	Conditional / Verify BAA	High	High	2026-09-30
Carbonite OpenText	Backup & Disaster Recovery	Verify Directly	Conditional / Verify BAA	High	Low	2026-09-30
Artera	Patient Engagement	Verify Directly	Conditional / Verify BAA	High	Low	2026-09-30
Pearl AI	Dental AI Imaging	Verify Directly	Conditional / Verify BAA	Critical	High	2026-09-16
Planet DDS Denticon	Dental Cloud PMS	Verify Directly	Conditional / Verify BAA	Critical	Low	2026-09-16
ServiceNow Healthcare	Internal Productivity	Verify Directly	Conditional / Verify BAA	High	Low	2026-10-01
Tali AI	Clinical Dictation	Verify Directly	Conditional / Verify BAA	High	High	2026-10-01
NexHealth	Patient Engagement	Verify Directly	Conditional / Verify BAA	High	Low	2026-10-01
Abridge	Ambient Clinical Documentation	Verify Directly	Conditional / Verify BAA	Critical	High	2026-09-30
Ambience Healthcare	Ambient Clinical Documentation	Verify Directly	Conditional / Verify BAA	Critical	High	2026-09-30
Teladoc Health	Telehealth	Verify Directly	Conditional / Verify BAA	High	Low	—
Sunoh.ai	Ambient Clinical Documentation	Verify Directly	Conditional / Verify BAA	High	High	2026-10-01
Nabla Copilot	Ambient Clinical Documentation	Verify Directly	Conditional / Verify BAA	High	High	2026-10-01
Augmedix	Ambient Clinical Documentation	Verify Directly	Conditional / Verify BAA	Critical	High	2026-09-30
Klara	Secure Messaging	Verify Directly	Conditional / Verify BAA	High	Low	2026-09-30
Freed AI	Ambient Clinical Documentation	Verify Directly	Conditional / Verify BAA	High	High	2026-09-30
DeepScribe	Ambient Clinical Documentation	Verify Directly	Conditional / Verify BAA	High	High	2026-09-30
IntakeQ	Patient Intake	Verify Directly	Conditional / Verify BAA	High	Low	—
Amwell	Telehealth	Verify Directly	Conditional / Verify BAA	High	Low	2026-09-30
Oracle Cloud Infrastructure	Cloud Infrastructure	Verify Directly	Conditional / Verify BAA	High	Low	2026-10-01
HIPAAtizer	HIPAA Forms	Verify Directly	Conditional / Verify BAA	High	Low	2026-09-30
Cohere Custom Models	AI Model Platforms	Verify Directly	Restricted / Review Required	High	High	2026-09-30
Doxy.me	Telehealth	Verify Directly	Conditional / Verify BAA	High	Low	2026-09-30
Phreesia	Patient Intake	Verify Directly	Conditional / Verify BAA	High	Low	2026-10-01
IBM Cloud	Cloud Infrastructure	Verify Directly	Conditional / Verify BAA	High	Low	2026-09-30
Suki AI	Ambient Clinical Documentation	Verify Directly	Conditional / Verify BAA	High	High	2026-10-01
Mend	Telehealth	Verify Directly	Conditional / Verify BAA	High	Low	—
Updox	Patient Engagement	Verify Directly	Conditional / Verify BAA	High	Low	—
Heidi Health	Ambient Clinical Documentation	Verify Directly	Conditional / Verify BAA	High	High	2026-09-30
DAX Copilot	Ambient Clinical Documentation	Verify Directly	Conditional / Verify BAA	Critical	High	2026-09-15
Twilio	Patient Communication	Verify Directly	Conditional / Verify BAA	High	Medium	2026-10-01
Solutionreach	Patient Communication	Verify Directly	Conditional / Verify BAA	High	Medium	2026-09-16
S10.AI	AI Scribes	Verify Directly	Conditional / Verify BAA	High	High	2026-10-01
RxNT	EHR / Practice Management	Verify Directly	Conditional / Verify BAA	High	Medium	2026-05-21
Overjet	Dental Imaging AI	Verify Directly	Conditional / Verify BAA	High	Medium	2026-09-16
OpenAI (API)	AI Infrastructure	Verify Directly	Conditional / Verify BAA	High	High	2026-08-17
Modmed	EHR / Practice Management	Verify Directly	Conditional / Verify BAA	High	Medium	2026-08-13
Meta Pixel (Healthcare)	Analytics	BAA Not Found	Not Recommended	Critical	High	2026-10-01
Medallia	Analytics	Verify Directly	Conditional / Verify BAA	High	Medium	2026-09-30
Mailchimp	Email & Secure Messaging	BAA Not Found	Not Recommended	High	High	2026-09-30
Klaviyo	Marketing Automation	BAA Not Found	Not Recommended	High	High	2026-09-30
Kareo	EHR / Practice Management	Verify Directly	Conditional / Verify BAA	High	Medium	2026-09-30
HubSpot Healthcare	Marketing Automation	BAA Not Found	Not Recommended	High	High	2026-09-30
Gradient Health	Healthcare Data API	Verify Directly	Conditional / Verify BAA	High	High	2026-09-30
Google Workspace	Internal Productivity	Verify Directly	Conditional / Verify BAA	High	Medium	2026-09-30
Google Analytics 4	Analytics	BAA Not Found	Not Recommended	High	High	2026-09-30
Domo	Analytics	Verify Directly	Conditional / Verify BAA	High	Medium	2026-09-15
DAX Copilot	Ambient AI	Verify Directly	Conditional / Verify BAA	High	High	2026-09-30
Allscripts	EHR / Practice Management	Verify Directly	Conditional / Verify BAA	High	Medium	2026-09-15
Adobe Acrobat Sign	Forms / Intake	Verify Directly	Conditional / Verify BAA	Medium	Low	2026-08-13
ActiveCampaign Healthcare	Marketing Automation	Verify Directly	Conditional / Verify BAA	High	Medium	2026-09-15
ActiveCampaign	Email & Secure Messaging	Verify Directly	Conditional / Verify BAA	Medium	Low	2026-09-30
Act-On	Marketing Automation	Verify Directly	Conditional / Verify BAA	High	Medium	2026-05-21
Acronis Cyber Protect	Backup & Disaster Recovery	Verify Directly	Conditional / Verify BAA	Medium	Low	2026-08-18
AWS Bedrock	AI Infrastructure	Verify Directly	Conditional / Verify BAA	High	High	2026-09-30
8x8 Healthcare	Phones & Call Tracking	Verify Directly	Conditional / Verify BAA	High	High	2026-09-30
Syllable	AI Assistants	Verify Directly	Approved With Restrictions	High	High	2026-05-22
DeepCura	AI Scribes	Verify Directly	Approved With Restrictions	High	High	2026-05-21
Ruler Analytics	Analytics & Tracking	Verify Directly	Restricted / Review Required	High	Low	2026-05-22
Notable	AI Assistants	Verify Directly	Approved With Restrictions	High	High	2026-05-22
Aidoc	Imaging AI	Verify Directly	Approved With Restrictions	High	Medium	2026-05-22
VoiceboxMD	AI Scribes	Verify Directly	Approved With Restrictions	High	High	2026-05-21
Practice by Numbers	Analytics	Verify Directly	Approved With Restrictions	Medium	Low	2026-05-22
Clearstep	AI Chatbots	Verify Directly	Approved With Restrictions	High	High	2026-05-22
Mutuo Health AutoScribe	AI Scribes	Verify Directly	Restricted / Review Required	High	High	2026-05-22
Ada Health	AI Chatbots	Verify Directly	Approved With Restrictions	High	High	2026-05-22
Genesys Cloud CX	Phones & Call Tracking	Verify Directly	Approved With Restrictions	High	High	2026-05-22
Mobius MD	AI Scribes	Verify Directly	Approved With Restrictions	High	Medium	2026-05-22
Zerto	Backup & Disaster Recovery	Verify Directly	Conditional / Verify BAA	High	Low	2026-06-03
Datto	Backup & Disaster Recovery	Verify Directly	Conditional / Verify BAA	High	Low	2026-06-03
Medwriter AI	AI Scribes	Verify Directly	Restricted / Review Required	High	High	2026-05-21
Infermedica	AI Chatbots	Verify Directly	Approved With Restrictions	High	High	2026-05-22
Augmedix	AI Scribes	Verify Directly	Approved With Restrictions	High	High	2026-05-21
RapidAI	Imaging AI	Verify Directly	Approved With Restrictions	High	Medium	2026-05-22
Glass Health	AI Assistants	Verify Directly	Restricted / Review Required	High	High	2026-05-22
Corti	AI Assistants	Verify Directly	Approved With Restrictions	High	High	2026-05-22
Zocdoc	Scheduling	Verify Directly	Approved With Restrictions	High	Low	2026-05-22
Nuance Dragon Medical One	AI Scribes	Verify Directly	Approved With Restrictions	High	Medium	2026-05-21
HeartFlow	Imaging AI	Verify Directly	Approved With Restrictions	High	Medium	2026-05-22
Axcient	Backup & Disaster Recovery	Verify Directly	Restricted / Review Required	Medium	Medium	2026-06-03
Innovaccer InScribe	AI Scribes	Verify Directly	Approved With Restrictions	High	High	2026-05-22
Hippocratic AI	AI Assistants	Verify Directly	Approved With Restrictions	High	High	2026-05-22
Paige	Imaging AI	Verify Directly	Approved With Restrictions	High	Medium	2026-05-22
Viz.ai	Imaging AI	Verify Directly	Approved With Restrictions	High	Medium	2026-05-22
Heidi Health	AI Scribes	Verify Directly	Approved With Restrictions	High	High	2026-05-22
Piwik PRO	Analytics & Tracking	Verify Directly	Approved With Restrictions	Medium	Low	2026-05-22
Rad AI	Imaging AI	Verify Directly	Approved With Restrictions	High	High	2026-05-22
Infinitus Systems	AI Assistants	Verify Directly	Approved With Restrictions	High	High	2026-05-22
NovaBACKUP	Backup & Disaster Recovery	Verify Directly	Restricted / Review Required	Medium	Medium	2026-06-03
Microsoft Dragon Copilot	AI Scribes	Verify Directly	Approved With Restrictions	High	High	2026-05-21
PathAI	Imaging AI	Verify Directly	Approved With Restrictions	High	High	2026-05-22
Augnito	AI Scribes	Verify Directly	Restricted / Review Required	High	Medium	2026-05-22
CallTrackingMetrics	Phones & Call Tracking	Verify Directly	Approved With Restrictions	High	Medium	2026-05-22
Qure.ai	Imaging AI	Verify Directly	Approved With Restrictions	High	Medium	2026-05-22
Hyro	AI Chatbots	Verify Directly	Approved With Restrictions	High	High	2026-05-22
Jarvis Analytics	Analytics	Verify Directly	Approved With Restrictions	Medium	Low	2026-06-03
Cleerly	Imaging AI	Verify Directly	Approved With Restrictions	High	Medium	2026-05-22
Five9	Phones & Call Tracking	Verify Directly	Approved With Restrictions	High	High	2026-05-22
Veeam Healthcare	Backup & Disaster Recovery	Verify Directly	Conditional / Verify BAA	High	Low	2026-06-03
Cohere Health	Billing / RCM	Verify Directly	Approved With Restrictions	High	Medium	2026-05-22
Duo Security	Identity & Access Management	Verify Directly	Approved With Restrictions	Medium	Medium	2026-05-21
CodaMetrix	Billing / RCM	Verify Directly	Approved With Restrictions	High	High	2026-05-22
Fathom	Billing / RCM	Verify Directly	Approved With Restrictions	High	High	2026-05-22
DentalXChange	Billing / RCM	Verify Directly	Approved With Restrictions	High	Low	2026-05-22
CrowdStrike	Cybersecurity	Verify Directly	Approved With Restrictions	High	Low	2026-06-03
Aptible	Cloud Infrastructure	Verify Directly	Approved With Restrictions	Medium	Low	2026-05-21
Drata	Cybersecurity	Verify Directly	Approved With Restrictions	Medium	Low	2026-05-22
Secureframe	Cybersecurity	Verify Directly	Approved With Restrictions	Medium	Low	2026-05-22
Demandforce	Marketing Automation	Verify Directly	Conditional / Verify BAA	High	Low	2026-05-21
Waystar	Billing / RCM	Verify Directly	Approved With Restrictions	High	Medium	2026-05-22
Nym	Billing / RCM	Verify Directly	Approved With Restrictions	High	High	2026-05-22
ClearDATA	Cloud Infrastructure	Verify Directly	Approved	High	Low	2026-05-22
Vyne Dental	Billing / RCM	Verify Directly	Approved With Restrictions	High	Low	2026-05-22
Change Healthcare	Billing / RCM	Verify Directly	Approved With Restrictions	High	Low	2026-05-22
SentinelOne	Cybersecurity	Verify Directly	Approved With Restrictions	High	Low	2026-06-03
Palo Alto Networks	Cybersecurity	Verify Directly	Approved With Restrictions	High	Low	2026-06-03
Vanta	Cybersecurity	Verify Directly	Approved With Restrictions	Medium	Low	2026-05-22
R1 RCM	Billing / RCM	Verify Directly	Approved With Restrictions	High	Medium	2026-05-22
Birdeye	Marketing Automation	Verify Directly	Approved With Restrictions	High	Medium	2026-05-22
Experian Health	Billing / RCM	Verify Directly	Approved With Restrictions	High	Low	2026-05-22
1Password Business	Identity & Access Management	Verify Directly	Conditional / Verify BAA	Medium	Medium	2026-05-21
Cedar	Billing / RCM	Verify Directly	Approved With Restrictions	High	Medium	2026-05-22
Availity	Billing / RCM	Verify Directly	Approved With Restrictions	High	Low	2026-05-22
Cloudflare	Cybersecurity	Verify Directly	Approved With Restrictions	Medium	Low	2026-06-03
AKASA	Billing / RCM	Verify Directly	Approved With Restrictions	High	High	2026-05-22
Atlantic.Net	Cloud Infrastructure	Verify Directly	Approved With Restrictions	Medium	Low	2026-05-21
Podium	Patient Communication	Verify Directly	Approved With Restrictions	High	Low	2026-05-22
Mend	Patient Communication	Verify Directly	Approved With Restrictions	High	Low	2026-05-22
Fabric Health	Patient Communication	Verify Directly	Approved With Restrictions	High	High	2026-05-22
Updox	Patient Communication	Verify Directly	Approved With Restrictions	High	Low	2026-05-22
Memora Health	Patient Communication	Verify Directly	Approved With Restrictions	High	High	2026-05-22
Redox	EHR / EMR	Verify Directly	Approved With Restrictions	High	Low	2026-05-22
Lighthouse 360	Patient Communication	Verify Directly	Conditional / Verify BAA	High	Low	2026-05-21
TeleVox	Patient Communication	Verify Directly	Approved With Restrictions	High	Medium	2026-05-22
Tebra	EHR / EMR	Verify Directly	Approved With Restrictions	High	Medium	2026-05-22
Athenahealth	EHR / EMR	Verify Directly	Approved With Restrictions	High	Medium	2026-05-22
Doxy.me	Patient Communication	Verify Directly	Approved With Restrictions	Medium	Medium	2026-05-21
SimplePractice	EHR / EMR	Verify Directly	Conditional / Verify BAA	Medium	Medium	2026-05-21
Relatient	Patient Communication	Verify Directly	Approved With Restrictions	High	Medium	2026-05-22
Datavant	EHR / EMR	Verify Directly	Approved With Restrictions	High	Medium	2026-05-22
eClinicalWorks	EHR / EMR	Verify Directly	Approved With Restrictions	High	Medium	2026-05-22
Healthie	EHR / EMR	Verify Directly	Approved With Restrictions	High	Low	2026-05-22
ModMed	EHR / EMR	Verify Directly	Approved With Restrictions	High	Medium	2026-05-22
Doctible	Patient Communication	Verify Directly	Approved With Restrictions	High	Low	2026-05-21
TherapyNotes	EHR / EMR	Verify Directly	Conditional / Verify BAA	Medium	Low	2026-05-21
Twilio	Patient Communication	Verify Directly	Approved With Restrictions	High	Medium	2026-05-22
AdvancedMD	EHR / EMR	Verify Directly	Approved With Restrictions	High	Low	2026-05-22
Weave	Patient Communication	Verify Directly	Conditional / Verify BAA	Medium	Low	2026-05-21

Recommended Actions

Verify BAA before PHI use

Contact the vendor to confirm current BAA terms and scope before processing any PHI.

Restrict PHI entry

Implement technical or administrative controls to prevent PHI from entering unapproved systems.

Require legal review

Engage legal counsel to review data processing agreements and contract terms.

Require security review

Conduct a security assessment before deployment in PHI-adjacent workflows.

Disable tracking where needed

Remove or reconfigure tracking pixels and analytics tools on pages where PHI may be present.

Document consent workflow

Establish and document patient or staff consent processes for relevant data collection.

Review configuration settings

Verify that vendor configuration meets HIPAA requirements for your specific deployment.

Train staff before approval

Provide governance and usage training before allowing staff access to the vendor platform.

Add to internal monitoring

Include this vendor in your organization's recurring vendor risk review cycle.

Governance Checklist

Identify PHI exposure paths for this vendor category

Confirm BAA availability with the vendor directly

Review vendor contract terms and data processing agreements

Review data retention and deletion settings

Review AI training data usage clauses

Review user access controls and audit logging

Document approved use cases and restrictions

Train staff on usage restrictions before deployment

Set a recurring review date based on risk classification

Related Intelligence

Vendor Registry

Browse the full VNDRIQ healthcare vendor registry.

Compare Vendors

Side-by-side comparison of any two vendors.

Benchmark Reports

Executive benchmark reports for healthcare vendor risk.

All Watchlists

View all VNDRIQ vendor risk watchlists.

AI Infrastructure Category

Compare all AI Infrastructure vendors.

Databases Category

Compare all Databases vendors.

Phones & Call Tracking Category

Compare all Phones & Call Tracking vendors.

Patient Communication Category

Compare all Patient Communication vendors.

Frequently Asked Questions

Contact the vendor's sales or legal team directly. Request a copy of their standard BAA and review the service scope to ensure your specific use case is covered. Do not rely on website claims alone.

Explore All VNDRIQ Watchlists

Monitor AI risk, BAA status, tracking exposure, and vendor governance across your technology stack.

VNDRIQ watchlists are based on available public information and internal review. Being on a watchlist does not mean a vendor is unsafe — it means active governance attention is recommended. This is not legal or compliance advice. Verify vendor BAA status and HIPAA program scope directly with each vendor.