Dental AI Vendors
Dental AI platforms process clinical diagnostic images, patient records, and treatment data that constitute PHI. DSOs and dental practices deploying AI tools must confirm BAA availability, verify data retention policies, and evaluate AI training risk before production deployment.
Watchlist Stats
Who Should Review
DSO executives, dental practice owners, compliance officers, and clinical IT leaders.
Why This Watchlist Matters
Dental radiographs are PHI and must be handled under a valid BAA.
AI diagnostic tools may retain clinical images for model training without explicit opt-out.
DSO environments amplify risk across multiple locations and patient populations.
New dental AI vendors may lack mature HIPAA compliance programs.
Vendor Table — 14 of 14 vendors
| Vendor | Category | BAA Status | Approval Tier | PHI Risk | AI Risk | Last Verified |
|---|---|---|---|---|---|---|
| Allisone | Dental Imaging AI | No public evidence of a Business Associate Agreement (BAA) was found in the search results; the company primarily highlights its CE Class IIa medical device certification for the European market. | Restricted / Review Required | High | Medium | — |
| Manchester Imaging | Dental Imaging AI | Not explicitly stated; the company is based in the UK and emphasizes GDPR compliance and ISO-13485 standards for medical devices. | Conditional / Verify BAA | High | Medium | — |
| Eyes of AI | Dental Imaging AI | Review Required; as an Australian-based company, US-specific Business Associate Agreements must be verified directly with the vendor for HIPAA compliance. | Conditional / Verify BAA | High | Medium | — |
| DentalXrai Pro | Dental Imaging AI | Likely available through parent company Align Technology; specific BAA terms for the DentalXrai/Align X-ray Insights platform should be verified during contracting. | Conditional / Verify BAA | High | Medium | — |
| Velmeni | Dental Imaging AI | Available for dental practices and covered entities as part of the service agreement. | Approved With Restrictions | Medium | Medium | — |
| CellmatiQ | Dental Imaging AI | No public Business Associate Agreement (BAA) was identified in the search results; the company primarily emphasizes EU CE certification and GDPR compliance. | Restricted / Review Required | High | High | — |
| Craniocatch | Dental Imaging AI | No publicly available Business Associate Agreement (BAA) was identified; the company is headquartered in Turkey and lacks verified FDA clearance for US clinical use. | Restricted / Review Required | High | Medium | — |
| CoTreat AI | Dental Imaging AI | Not explicitly stated; as an Australian-based company, verification of US HIPAA compliance and BAA availability is required before use with US PHI. | Conditional / Verify BAA | High | Medium | — |
| Adravision | Dental Imaging AI | As a clinical AI vendor processing dental radiographs and patient data, Adravision typically operates under a Business Associate Agreement, though specific terms should be verified during procurement. | Conditional / Verify BAA | High | Medium | — |
| AI:Dental | Dental Imaging AI | The vendor mentions responsible handling of patient information for AI development but does not explicitly confirm BAA availability in public snippets. | Restricted / Review Required | High | High | — |
| VideaHealth | Dental Imaging AI | Verify Directly | Restricted / Review Required | 2026-09-01 | ||
| Grin | Dental Imaging AI | Verify Directly | Conditional / Verify BAA | High | High | — |
| DentalMonitoring | Dental Imaging AI | Verify Directly | Conditional / Verify BAA | High | High | 2026-09-30 |
| Overjet | Dental Imaging AI | Verify Directly | Conditional / Verify BAA | High | Medium | 2026-09-16 |
Recommended Actions
Verify BAA before PHI use
Contact the vendor to confirm current BAA terms and scope before processing any PHI.
Restrict PHI entry
Implement technical or administrative controls to prevent PHI from entering unapproved systems.
Require legal review
Engage legal counsel to review data processing agreements and contract terms.
Require security review
Conduct a security assessment before deployment in PHI-adjacent workflows.
Disable tracking where needed
Remove or reconfigure tracking pixels and analytics tools on pages where PHI may be present.
Document consent workflow
Establish and document patient or staff consent processes for relevant data collection.
Review configuration settings
Verify that vendor configuration meets HIPAA requirements for your specific deployment.
Train staff before approval
Provide governance and usage training before allowing staff access to the vendor platform.
Add to internal monitoring
Include this vendor in your organization's recurring vendor risk review cycle.
Governance Checklist
Identify PHI exposure paths for this vendor category
Confirm BAA availability with the vendor directly
Review vendor contract terms and data processing agreements
Review data retention and deletion settings
Review AI training data usage clauses
Review user access controls and audit logging
Document approved use cases and restrictions
Train staff on usage restrictions before deployment
Set a recurring review date based on risk classification
Related Intelligence
Vendor Registry
Browse the full VNDRIQ healthcare vendor registry.
Compare Vendors
Side-by-side comparison of any two vendors.
Benchmark Reports
Executive benchmark reports for healthcare vendor risk.
All Watchlists
View all VNDRIQ vendor risk watchlists.
Dental Imaging AI Category
Compare all Dental Imaging AI vendors.
AI Scribes Category
Compare all AI Scribes vendors.
EHR / Practice Management Category
Compare all EHR / Practice Management vendors.
Dental Ai Vendor Risk Benchmark
View related benchmark report.
Frequently Asked Questions
Yes. Dental imaging AI platforms process diagnostic radiographs that are directly linked to patient records and constitute PHI. A BAA must be executed before deploying dental imaging AI in a production clinical environment.
VNDRIQ watchlists are based on available public information and internal review. Being on a watchlist does not mean a vendor is unsafe — it means active governance attention is recommended. This is not legal or compliance advice. Verify vendor BAA status and HIPAA program scope directly with each vendor.