HIPAA considerations for healthcare practices

Healthcare vertical

If your agent's vertical is set to healthcare, VoiceCraft applies additional safeguards:

HIPAA readiness flag

Your organization has a hipaaReady status and hipaaReviewStatus that must be approved before certain features are available.

Form gating

Healthcare agents cannot use form templates until the organization is marked as HIPAA-ready. Attempting to create form templates shows a HIPAA Gate Notice explaining the requirement.

Business Associate Agreement (BAA)

Healthcare organizations must accept a BAA before processing protected health information. VoiceCraft tracks the BAA version accepted by your organization.

Form submission tombstoning

Form submissions can be tombstoned (PII redacted while preserving the audit record) rather than fully deleted. This supports compliance with HIPAA data handling requirements.

What this means for you

• If you are a healthcare practice, set your agent's vertical to "healthcare" during creation.
• Some features may be restricted until HIPAA review is complete.
• Data handling follows stricter retention and redaction rules.
• Contact your VoiceCraft account representative if you need to initiate the HIPAA review process.

Non-healthcare businesses

If your business is not in healthcare, these restrictions do not apply. You have full access to all features without HIPAA gating.