Can enterprise AI tools be used in healthcare?

Enterprise-tier AI platforms may be appropriate for healthcare use when a BAA is available, data handling terms are verified, and model training opt-out is confirmed. Each deployment requires individual evaluation.

What is a healthcare vendor watchlist?

A healthcare vendor watchlist is a curated list of software platforms and technology vendors that require elevated governance attention due to BAA status uncertainty, PHI exposure risk, AI data usage risk, tracking risk, or other compliance considerations.

Does being on a watchlist mean a vendor is unsafe?

No. Being on a VNDRIQ watchlist means the vendor requires active governance attention — not that it is definitively unsafe. Many watchlist vendors can be used appropriately with the right controls, BAA execution, and configuration.

What does BAA verification needed mean?

"BAA Verification Needed" means VNDRIQ has not independently confirmed a current, executed BAA with this vendor. Organizations must verify BAA availability directly with the vendor before processing PHI.

How often should vendor risk be reviewed?

VNDRIQ recommends quarterly reviews for high-risk vendors, semiannual reviews for medium-risk vendors, and annual reviews for lower-risk operational tools. Any significant product update, acquisition, or policy change should trigger an ad-hoc review.

Can consumer AI tools be used with PHI?

Consumer AI tools are generally not recommended for PHI use. Consumer tiers typically do not offer BAAs, and data may be used for model training. Enterprise-tier products from the same vendors may offer appropriate compliance pathways but must be evaluated separately.

Critical RiskAI Training RiskUpdated 2026-06-01

High-Risk AI Tools

Q: Why are AI tools placed on a watchlist?

AI tools are placed on watchlists when they process PHI, lack verified BAAs, use customer data for model training, or are consumer-grade tools being used in clinical or administrative workflows where patient data may be exposed.

AI tools represent the fastest-growing category of compliance risk in healthcare. Many platforms lack verified BAAs, use customer data for model training, or are consumer-grade tools being deployed in clinical and administrative workflows without appropriate governance.

Watchlist Stats

Risk Score92/100

Live Vendors122

Risk LevelCritical

Who Should Review

Compliance officers, IT directors, clinical department heads, and executive leadership.

Why This Watchlist Matters

AI tools that process PHI without a BAA create immediate HIPAA liability.

Consumer AI platforms frequently use input data for model training by default.

Staff may adopt consumer AI tools without governance awareness or approval.

AI training risk compounds across an organization when multiple tools are used without oversight.

Vendor Table — 122 of 122 vendors

Vendor	Category	BAA Status	Approval Tier	PHI Risk	AI Risk	Last Verified
Dentina.AI	Dental Documentation AI	Not explicitly confirmed; requires verification with vendor.	Restricted / Review Required	High	High	—
CellmatiQ	Dental Imaging AI	No public Business Associate Agreement (BAA) was identified in the search results; the company primarily emphasizes EU CE certification and GDPR compliance.	Restricted / Review Required	High	High	—
AI:Dental	Dental Imaging AI	The vendor mentions responsible handling of patient information for AI development but does not explicitly confirm BAA availability in public snippets.	Restricted / Review Required	High	High	—
Ibex Medical Analytics	Digital Pathology AI	Available upon request for clinical customers	Approved With Restrictions	High	High	2026-09-30
Zowie Healthcare	Patient Communication AI	Public documentation does not explicitly confirm a standard BAA; healthcare deployments likely require individual negotiation and verification of data handling protocols [AI Agents for Patient Communication & Access (2026) - Zowie](https://getzowie.com/blog/ai-agents-patient-communication-access-2026).	Restricted / Review Required	High	High	—
XSOLIS	Utilization Management	Standard requirement for healthcare clients; however, recent security incidents necessitate rigorous verification of current BAA terms and breach notification protocols.	Restricted / Review Required	High	High	—
Assort Health	Patient Communication AI	Assort Health signs Business Associate Agreements (BAAs) with all clients and maintains downstream BAAs with its AI subprocessors, including LLM, speech-to-text, and telephony providers.	Conditional / Verify BAA	High	High	2026-09-30
PolyAI	Healthcare Administrative AI	PolyAI provides a Business Associate Agreement (BAA) for healthcare clients and claims HIPAA compliance as a standard feature of its platform governance.	Conditional / Verify BAA	High	High	2026-10-01
Layer Health	Clinical Intelligence AI	Not Verified	Restricted / Review Required	High	High	—
Sarvam AI	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	—
Synthesia	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	—
Bria AI	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	—
HyperCLOVA X	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	—
Sakana AI	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	—
LG EXAONE	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	—
Upstage	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	2026-10-01
Lightricks	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	—
Huawei Pangu	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	—
Xiaomi MiMo	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	—
01.AI (Yi)	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	2026-08-12
Ant Group BaiLing	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	—
Huawei ModelArts	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	—
Baichuan	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	—
SenseNova	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	—
StepFun	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	—
iFlytek Spark	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	—
Youdao Ziyue	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	—
OPPO AndesGPT	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	—
Core42	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	—
JD JoyAI	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	—
Skywork AI	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	—
Jais	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	—
Black Forest Labs	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	2026-08-31
Vivo BlueLM	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	—
LightOn	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	—
Z.ai (GLM)	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	—
Tencent Hunyuan	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	—
ByteDance Doubao	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	—
Alibaba Cloud Model Studio	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	2026-09-30
Baidu Qianfan	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	—
ByteDance Seed	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	—
Tencent Cloud TI Platform	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	—
Moonshot AI (Kimi)	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	—
MiniMax	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	—
Volcano Engine Ark	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	—
ElevenLabs	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	2026-09-30
DeepSeek	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	—
Falcon (TII)	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	—
Baidu ERNIE	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	—
Cohere	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	2026-09-30
Mistral AI	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	2026-10-01
Aleph Alpha	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	—
Alibaba Qwen	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	2026-08-31
Stability AI	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	—
AI21 Labs	Foreign AI Models	Verify Directly	Restricted / Review Required	High	High	—
SuperDial	Healthcare Administrative AI	Verify Directly	Restricted / Review Required	High	High	2026-10-01
Tandem Health	Ambient Clinical Documentation	Verify Directly	Conditional / Verify BAA	Critical	High	2026-09-16
SPRY	Ambient Clinical Documentation	Verify Directly	Restricted / Review Required	High	High	2026-10-01
Glass Health	Clinical Intelligence AI	Verify Directly	Restricted / Review Required	Critical	High	2026-09-30
Grin	Dental Imaging AI	Verify Directly	Conditional / Verify BAA	High	High	—
Dialpad Healthcare	Phones & Call Tracking	Verify Directly	Conditional / Verify BAA	High	High	2026-09-30
DentalMonitoring	Dental Imaging AI	Verify Directly	Conditional / Verify BAA	High	High	2026-09-30
Sprinklr Healthcare	Marketing	Verify Directly	Conditional / Verify BAA	High	High	2026-10-01
Overjet	Dental AI Imaging	Verify Directly	Conditional / Verify BAA	Critical	High	2026-09-01
VideaHealth	Dental AI Imaging	Verify Directly	Conditional / Verify BAA	Critical	High	—
Bola AI	Dental Voice AI	Verify Directly	Conditional / Verify BAA	High	High	2026-09-30
Pearl AI	Dental AI Imaging	Verify Directly	Conditional / Verify BAA	Critical	High	2026-09-16
Tali AI	Clinical Dictation	Verify Directly	Conditional / Verify BAA	High	High	2026-10-01
OpenAI API Healthcare	AI Model Platforms	BAA Available	Conditional / Verify BAA	High	High	2026-10-01
Abridge	Ambient Clinical Documentation	Verify Directly	Conditional / Verify BAA	Critical	High	2026-09-30
Ambience Healthcare	Ambient Clinical Documentation	Verify Directly	Conditional / Verify BAA	Critical	High	2026-09-30
Sunoh.ai	Ambient Clinical Documentation	Verify Directly	Conditional / Verify BAA	High	High	2026-10-01
Nabla Copilot	Ambient Clinical Documentation	Verify Directly	Conditional / Verify BAA	High	High	2026-10-01
Augmedix	Ambient Clinical Documentation	Verify Directly	Conditional / Verify BAA	Critical	High	2026-09-30
Freed AI	Ambient Clinical Documentation	Verify Directly	Conditional / Verify BAA	High	High	2026-09-30
DeepScribe	Ambient Clinical Documentation	Verify Directly	Conditional / Verify BAA	High	High	2026-09-30
Cohere Custom Models	AI Model Platforms	Verify Directly	Restricted / Review Required	High	High	2026-09-30
Anthropic Claude Enterprise	AI Model Platforms	BAA Available	Conditional / Verify BAA	High	High	2026-08-13
Suki AI	Ambient Clinical Documentation	Verify Directly	Conditional / Verify BAA	High	High	2026-10-01
Heidi Health	Ambient Clinical Documentation	Verify Directly	Conditional / Verify BAA	High	High	2026-09-30
DAX Copilot	Ambient Clinical Documentation	Verify Directly	Conditional / Verify BAA	Critical	High	2026-09-15
S10.AI	AI Scribes	Verify Directly	Conditional / Verify BAA	High	High	2026-10-01
OpenAI (API)	AI Infrastructure	Verify Directly	Conditional / Verify BAA	High	High	2026-08-17
Meta Pixel (Healthcare)	Analytics	BAA Not Found	Not Recommended	Critical	High	2026-10-01
Mailchimp	Email & Secure Messaging	BAA Not Found	Not Recommended	High	High	2026-09-30
Klaviyo	Marketing Automation	BAA Not Found	Not Recommended	High	High	2026-09-30
HubSpot Healthcare	Marketing Automation	BAA Not Found	Not Recommended	High	High	2026-09-30
Gradient Health	Healthcare Data API	Verify Directly	Conditional / Verify BAA	High	High	2026-09-30
Google Analytics 4	Analytics	BAA Not Found	Not Recommended	High	High	2026-09-30
Freed	AI Scribes	BAA Available	Approved With Restrictions	High	High	2026-09-30
DAX Copilot	Ambient AI	Verify Directly	Conditional / Verify BAA	High	High	2026-09-30
AWS Bedrock	AI Infrastructure	Verify Directly	Conditional / Verify BAA	High	High	2026-09-30
8x8 Healthcare	Phones & Call Tracking	Verify Directly	Conditional / Verify BAA	High	High	2026-09-30
Syllable	AI Assistants	Verify Directly	Approved With Restrictions	High	High	2026-05-22
DeepCura	AI Scribes	Verify Directly	Approved With Restrictions	High	High	2026-05-21
Notable	AI Assistants	Verify Directly	Approved With Restrictions	High	High	2026-05-22
VoiceboxMD	AI Scribes	Verify Directly	Approved With Restrictions	High	High	2026-05-21
Clearstep	AI Chatbots	Verify Directly	Approved With Restrictions	High	High	2026-05-22
Mutuo Health AutoScribe	AI Scribes	Verify Directly	Restricted / Review Required	High	High	2026-05-22
Ada Health	AI Chatbots	Verify Directly	Approved With Restrictions	High	High	2026-05-22
Genesys Cloud CX	Phones & Call Tracking	Verify Directly	Approved With Restrictions	High	High	2026-05-22
Medwriter AI	AI Scribes	Verify Directly	Restricted / Review Required	High	High	2026-05-21
Infermedica	AI Chatbots	Verify Directly	Approved With Restrictions	High	High	2026-05-22
Augmedix	AI Scribes	Verify Directly	Approved With Restrictions	High	High	2026-05-21
Glass Health	AI Assistants	Verify Directly	Restricted / Review Required	High	High	2026-05-22
Corti	AI Assistants	Verify Directly	Approved With Restrictions	High	High	2026-05-22
Innovaccer InScribe	AI Scribes	Verify Directly	Approved With Restrictions	High	High	2026-05-22
Hippocratic AI	AI Assistants	Verify Directly	Approved With Restrictions	High	High	2026-05-22
Heidi Health	AI Scribes	Verify Directly	Approved With Restrictions	High	High	2026-05-22
Rad AI	Imaging AI	Verify Directly	Approved With Restrictions	High	High	2026-05-22
Infinitus Systems	AI Assistants	Verify Directly	Approved With Restrictions	High	High	2026-05-22
Microsoft Dragon Copilot	AI Scribes	Verify Directly	Approved With Restrictions	High	High	2026-05-21
PathAI	Imaging AI	Verify Directly	Approved With Restrictions	High	High	2026-05-22
Hyro	AI Chatbots	Verify Directly	Approved With Restrictions	High	High	2026-05-22
Avora	AI Scribes	BAA Available	Approved With Restrictions	High	High	2026-05-21
Five9	Phones & Call Tracking	Verify Directly	Approved With Restrictions	High	High	2026-05-22
CodaMetrix	Billing / RCM	Verify Directly	Approved With Restrictions	High	High	2026-05-22
Fathom	Billing / RCM	Verify Directly	Approved With Restrictions	High	High	2026-05-22
Nym	Billing / RCM	Verify Directly	Approved With Restrictions	High	High	2026-05-22
AKASA	Billing / RCM	Verify Directly	Approved With Restrictions	High	High	2026-05-22
Fabric Health	Patient Communication	Verify Directly	Approved With Restrictions	High	High	2026-05-22
Memora Health	Patient Communication	Verify Directly	Approved With Restrictions	High	High	2026-05-22

Recommended Actions

Verify BAA before PHI use

Contact the vendor to confirm current BAA terms and scope before processing any PHI.

Restrict PHI entry

Implement technical or administrative controls to prevent PHI from entering unapproved systems.

Require legal review

Engage legal counsel to review data processing agreements and contract terms.

Require security review

Conduct a security assessment before deployment in PHI-adjacent workflows.

Disable tracking where needed

Remove or reconfigure tracking pixels and analytics tools on pages where PHI may be present.

Document consent workflow

Establish and document patient or staff consent processes for relevant data collection.

Review configuration settings

Verify that vendor configuration meets HIPAA requirements for your specific deployment.

Train staff before approval

Provide governance and usage training before allowing staff access to the vendor platform.

Add to internal monitoring

Include this vendor in your organization's recurring vendor risk review cycle.

Governance Checklist

Identify PHI exposure paths for this vendor category

Confirm BAA availability with the vendor directly

Review vendor contract terms and data processing agreements

Review data retention and deletion settings

Review AI training data usage clauses

Review user access controls and audit logging

Document approved use cases and restrictions

Train staff on usage restrictions before deployment

Set a recurring review date based on risk classification

Related Intelligence

Vendor Registry

Browse the full VNDRIQ healthcare vendor registry.

Compare Vendors

Side-by-side comparison of any two vendors.

Benchmark Reports

Executive benchmark reports for healthcare vendor risk.

All Watchlists

View all VNDRIQ vendor risk watchlists.

AI Scribes Category

Compare all AI Scribes vendors.

AI Chatbots Category

Compare all AI Chatbots vendors.

AI Infrastructure Category

Compare all AI Infrastructure vendors.

Internal Productivity Category

Compare all Internal Productivity vendors.

Frequently Asked Questions

Consumer-grade AI platforms, AI tools without verified BAAs, and AI platforms with high or critical AI training risk classifications are included. Enterprise versions of AI platforms are evaluated separately based on their compliance programs.

Explore All VNDRIQ Watchlists

Monitor AI risk, BAA status, tracking exposure, and vendor governance across your technology stack.

VNDRIQ watchlists are based on available public information and internal review. Being on a watchlist does not mean a vendor is unsafe — it means active governance attention is recommended. This is not legal or compliance advice. Verify vendor BAA status and HIPAA program scope directly with each vendor.