Guide

What does a BAA cover for AI phone calls?

A Business Associate Agreement, or BAA, is the contract HIPAA requires before a company handles patient information for a healthcare practice. For AI phone calls, it covers what the service may do with the patient details callers share, how it keeps them safe and what happens if something goes wrong.

Kinglet team

On this page

Why do AI phone calls need one?

People who call a practice share patient information: their name, their phone number, why they're calling and when they want to come in. The service that answers those calls handles that information for the practice.

Under HIPAA, a company that handles patient information for a practice is its business associate. The BAA is the written agreement between them.

What does a BAA cover?

It sets the rules for patient information. A BAA says:

  • What it may do

    What the service may and may not do with patient information.

  • How it keeps it safe

    The steps it takes to protect that information.

  • What happens if something goes wrong

    That it tells the practice if patient information is exposed.

  • The same rules for its services

    That the companies it uses to handle patient information agree to the same rules.

  • When the agreement ends

    What happens to the information when the work stops.

What doesn't a BAA do?

  • It isn't a certificate

    There's no official HIPAA certificate, so Kinglet shows no HIPAA badge.

  • It doesn't cover your own duties

    Your own steps, like a risk assessment, stay with your practice.

  • It doesn't allow medical advice

    Kinglet never judges symptoms or suggests treatment. It sends emergencies to 911 and passes medical questions to your staff.

Who needs one?

Only businesses that handle patient information. We ask during sign-up. If you do, you sign it before your agent goes live. If you don't, you skip that step.

How does Kinglet handle patient calls?

  • BAA first

    We sign a Business Associate Agreement with you before your first patient call.

  • Our services sign too

    Every service that would handle patient calls signs one with us before then.

  • No patient calls until the checks are done

    Your agent doesn't take real patient calls until your agreement is signed and our own checks are finished.

  • Patient transcripts

    No recording is kept. The transcript is stored encrypted, a log records who opens it, and it's deleted within 90 days.

Clinics can try Kinglet free now, on a private trial page.

What should you ask any AI phone service?

  • Will you sign a BAA before our first patient call?
  • Do the services you use for patient calls sign one with you?
  • What happens to recordings and transcripts, and for how long?
  • Who can see our calls?

Kinglet's answers are on our Security page, with the date we last checked them.

Read the Security page

A little clarity

Good questions. Straight answers.

Do I need a BAA for an AI receptionist?

Only if your business handles patient information. If you do, you sign it before your agent goes live. If you don't, you skip that step.

Is there a HIPAA certificate?

No. There's no official HIPAA certificate, so Kinglet shows no HIPAA badge.

Can a clinic try Kinglet before signing a BAA?

Yes. Clinics can try Kinglet free now. Your agent doesn't take real patient calls until your agreement is signed and our own checks are finished.

Can the AI give medical advice?

No. It never judges symptoms or suggests treatment. It sends emergencies to 911 and passes medical questions to your staff.

Hear it for yourself.

Try your own agent free, with no card. You pay when it goes live.