Agreements before patient calls
A practice BAA, provider agreements, and configuration review are required before protected health information is handled.
ClearPath AI · Security & privacy
HIPAA eligibility starts with the operating model.
HIPAA-eligible infrastructure is the foundation—not a certification or a substitute for signed agreements and verified controls.
Minimum necessary data
Scope intake fields and access to what your approved workflow needs.
Your team keeps clinical decisions
Symptoms, results, and medical questions are routed to staff. The agent does not provide medical advice.
Controls reviewed before go-live
Confirm encryption, private storage, retention, role-based access, recording disclosure, and incident procedures for your deployment.
Frequently asked questions
Will you sign a BAA?
A signed Business Associate Agreement and verified provider agreements are required before patient information is handled. Request our security overview to review the proposed arrangement.
Where are recordings stored?
Storage, access controls, and retention must be agreed for your deployment before go-live. Ask us for the practice-specific data flow and retention details.
Does the AI give medical advice?
No. Clinical questions and urgent concerns follow your approved transfer rules and go to your staff.
What happens if there is a breach?
Notification procedures and responsibilities must be documented in your signed BAA and operating plan.
Is AI trained on patient calls?
Provider training and retention terms must be verified for the chosen configuration before patient calls begin. We do not claim an unverified training exclusion.