HIPPA Compliance/BAA | Meeting Request
I'd like to have a meeting with a member of the Vapi team to understand what your HIPPA compliant package includes, before going ahead and purchasing it. Who can I contact regarding this?
EVapi’s HIPAA-compliant plan disables all data storage no transcripts, logs, or recordings, uses certified providers for in-memory processing, blocks PHI outside the /call endpoint, and ensures no data is used for model training, activated via "hipaaEnabled": true in the assistant config..
https://docs.vapi.ai/security-and-privacy/hipaa
https://docs.vapi.ai/security-and-privacy/hipaa
Learn how to ensure privacy when using Vapi's voice assistant platform.
Ddoes this mean the the model, voice and transcriber are all HIPPA compliant? Will there be any other configuration needed on our end for compliance? And can we get a copy of the BAA before signing?
Dwe were going to set up a custom llm to help fix this instead
Dand are we still able to configure storage for our own recordings/transcripts
KYou can go through our security portal and read the necessary documents, which you can access through https://security.vapi.ai/, and it will answer all your questions. Also, once you request the document, just email back with the email address and the company name through which you registered. I will approve the request for it.
KYes, if you purchase HIPAA compliance on the billing page ($1000/month), you can still have call recordings and VAPI can store them in a HIPAA-compliant manner. However, there are specific requirements to ensure HIPAA compliance for your recordings:
1. Cloud Storage Requirements:
1. Purchase the HIPAA compliance add-on in your subscription billing page ($1000/month)
2. Set up one of the supported cloud storage providers (S3, GCP, Azure, etc.)
3. Add your storage credentials on the Provider Credentials page in the Dashboard
4. Make sure your assistant's
5. Configure the
3. Important Notes:
1. Cloud Storage Requirements:
- You must provide your own HIPAA-compliant cloud storage credentials
- VAPI supports several providers for HIPAA-compliant storage:
- Amazon S3
- Google Cloud Storage (GCP)
- Others
1. Purchase the HIPAA compliance add-on in your subscription billing page ($1000/month)
2. Set up one of the supported cloud storage providers (S3, GCP, Azure, etc.)
3. Add your storage credentials on the Provider Credentials page in the Dashboard
4. Make sure your assistant's
artifactPlan.recordingEnabled is set to true5. Configure the
recordingPath if you want to customize where recordings are stored3. Important Notes:
- Without proper cloud storage credentials, recordings won't be stored when HIPAA compliance is enabled
- You'll still receive an end-of-call report with call information
- With HIPAA enabled, VAPI won't store the recordings in their own storage
Ddoes this mean we need to set Vapi up via code? This does not look doable via the dashboard.
DA conversation with the Vapi team would help make this clearer.
KWhen you add credentials via the integrations page for a storage location (S3, Google Cloud, etc.) it will automatically store your audio recordings in your storage location. As long as Audio Recording is enabled on the assistant level (on the dashboard under 'Privacy' section) your recording will be stored there.
