# HIPAA and the BAA at Airhug

> Every Airhug plan includes a BAA for healthcare businesses at no extra cost, accepted in the console. Which vendors handle patient information, and what Airhug does not claim. The BAA text is a draft and healthcare phone calls are not available yet.

Canonical: https://airhug.ai/hipaa
Last updated: 2026-11-06

Every plan includes a Business Associate Agreement for healthcare businesses at no extra cost. Your team accepts it in the console, and Airhug has a BAA in place with each vendor listed below. Airhug's BAA is a draft that counsel has not yet reviewed.

## How the BAA works

Healthcare businesses pay the same price as everyone else. An owner or administrator accepts Airhug's BAA in the Airhug console. It governs how Airhug uses, discloses and protects patient information for that workspace. The text is currently a draft template that counsel has not yet reviewed, so the final text may change and you will be asked to accept it again. Read the [Terms of Service](https://airhug.ai/terms) too. You can ask for a copy at hipaa@airhug.ai.

## Who handles patient information

Vendor

What it does for Airhug

Agreement

Amazon Web Services

Hosting, database, encrypted storage and backups, call recordings, email

AWS Business Associate Addendum, effective August 14, 2026

Retell AI

Phone calls and text messages for healthcare workspaces

Retell Business Associate Agreement

OpenAI

The AI that writes replies, reads documents and answers web chat

OpenAI Business Associate Addendum, executed October 14, 2026, covering the API under Modified Retention

Healthcare phone calls and texts are planned to run on Retell and are not available yet. Do not plan around them until we confirm your number is live.

## What this does not mean

Airhug has no HIPAA certificate, because none exists, and does not hold a SOC 2 report. A BAA does not make a practice compliant on its own. Standard workspaces and apps you connect yourself are outside the BAA. Airhug does not give medical advice. This page is not legal advice. Last reviewed November 6, 2026. Spot an error? Email [hello@airhug.ai](mailto:hello@airhug.ai).

## Frequently asked questions

### Does Airhug sign a BAA?

Every plan includes Airhug's Business Associate Agreement for healthcare businesses, at no extra cost. An owner or administrator accepts it in the console. The accepted version, who accepted it and when appear in workspace settings, with a download. The current text is a draft template that counsel has not yet reviewed, so the final text may change and you will be asked to accept it again.

### Does Airhug have a HIPAA certificate?

No. No official HIPAA certificate exists. Airhug also does not hold a SOC 2 report. You stay responsible for your own HIPAA obligations.

### Which vendors handle patient information?

Amazon Web Services for hosting, storage and email, Retell AI for healthcare calls and texts, and OpenAI for the AI that writes replies and reads documents. Studio Yeehaw LLC, the company behind Airhug, has a BAA with each of them. Healthcare phone calls and texts through Retell are not available yet.

### Are non-healthcare workspaces covered by a BAA?

No. Standard workspaces are not covered by a BAA and must not be used for patient information.

### Are apps I connect covered?

No. Apps you connect yourself, such as calendars or chat apps, are outside Airhug's BAA, and you need your own agreements with those providers.