We offer our services to chiropractors and we need BAA's in place. I'm in the process of getting one from Twilio and need to verify that assistable.AI has one with its 3rd party ai providers like open ai as well as staying HIPPA compliant. 1️⃣ Does Assistable.AI sign a Business Associate Agreement (BAA) with covered entities (healthcare providers like us)? If so, where can I get that in writing? 2️⃣ What measures do you have in place to ensure HIPAA compliance when processing PHI?
3️⃣ How do you store, transmit, and protect PHI data processed by your AI system?
4️⃣ Do you have a HIPAA compliance officer or legal team overseeing compliance?
5️⃣ Do you have a signed BAA with OpenAI (or any other AI provider you use)?
7️⃣ How do you prevent OpenAI (or other third-party AI tools) from storing or using PHI for training their models?
8️⃣ Are all AI-generated conversations logged, and if so, how are they stored and protected?
9️⃣ Can we request PHI deletion upon request, and how quickly can it be done?
🔟 Do you perform regular HIPAA security audits?
1️⃣1️⃣ Do you allow us to restrict PHI from being used in AI interactions?
1️⃣2️⃣ How do you handle HIPAA breaches or security incidents?