HIPAA and the BAA at Airhug
Every plan includes a Business Associate Agreement for healthcare businesses at no extra cost. Your team accepts it in the console, and Airhug has a BAA in place with each vendor listed below. Airhug's BAA is a draft that counsel has not yet reviewed.
How the BAA works
Healthcare businesses pay the same price as everyone else. An owner or administrator accepts Airhug's BAA in the Airhug console. It governs how Airhug uses, discloses and protects patient information for that workspace. The text is currently a draft template that counsel has not yet reviewed, so the final text may change and you will be asked to accept it again. Read the Terms of Service too. You can ask for a copy at hipaa@airhug.ai.
Who handles patient information
| Vendor | What it does for Airhug | Agreement |
|---|---|---|
| Amazon Web Services | Hosting, database, encrypted storage and backups, call recordings, email | AWS Business Associate Addendum, effective August 14, 2026 |
| Retell AI | Phone calls and text messages for healthcare workspaces | Retell Business Associate Agreement |
| OpenAI | The AI that writes replies, reads documents and answers web chat | OpenAI Business Associate Addendum, executed October 14, 2026, covering the API under Modified Retention |
Healthcare phone calls and texts are planned to run on Retell and are not available yet. Do not plan around them until we confirm your number is live.
What this does not mean
Airhug has no HIPAA certificate, because none exists, and does not hold a SOC 2 report. A BAA does not make a practice compliant on its own. Standard workspaces and apps you connect yourself are outside the BAA. Airhug does not give medical advice. This page is not legal advice. Last reviewed November 6, 2026. Spot an error? Email hello@airhug.ai.
Frequently asked questions
Still curious? Ask in the chat. It's Airhug answering.
Does Airhug sign a BAA?
Every plan includes Airhug's Business Associate Agreement for healthcare businesses, at no extra cost. An owner or administrator accepts it in the console. The accepted version, who accepted it and when appear in workspace settings, with a download. The current text is a draft template that counsel has not yet reviewed, so the final text may change and you will be asked to accept it again.
Does Airhug have a HIPAA certificate?
No. No official HIPAA certificate exists. Airhug also does not hold a SOC 2 report. You stay responsible for your own HIPAA obligations.
Which vendors handle patient information?
Amazon Web Services for hosting, storage and email, Retell AI for healthcare calls and texts, and OpenAI for the AI that writes replies and reads documents. Studio Yeehaw LLC, the company behind Airhug, has a BAA with each of them. Healthcare phone calls and texts through Retell are not available yet.
Are non-healthcare workspaces covered by a BAA?
No. Standard workspaces are not covered by a BAA and must not be used for patient information.
Are apps I connect covered?
No. Apps you connect yourself, such as calendars or chat apps, are outside Airhug's BAA, and you need your own agreements with those providers.
Let your office run itself
Airhug is opening to a few businesses at a time. Tell us about yours and we'll get you set up.