Compliance

HIPAA Compliance

CohandlerAI is fully compliant with the Health Insurance Portability and Accountability Act (HIPAA) for US dental practices.

What is HIPAA?

The Health Insurance Portability and Accountability Act (HIPAA) is a US federal law that sets the standard for protecting sensitive patient health information (PHI). Any business that handles PHI on behalf of a healthcare provider — including AI receptionist services like CohandlerAI — must comply with HIPAA regulations.

As a Business Associate under HIPAA, CohandlerAI signs a Business Associate Agreement (BAA) with every US dental practice we work with. This is your contractual guarantee of our compliance obligations.

Business Associate Agreement (BAA)

Every US dental clinic that uses CohandlerAI receives a signed BAA at no additional cost. This legally binds us to protect your patient data under HIPAA requirements.

Request Your BAA

Administrative Safeguards

Designated Privacy and Security Officers
Annual HIPAA training for all staff
Risk analysis and management procedures
Business Associate Agreements (BAAs) with all vendors
Workforce access controls and authorisation policies

Physical Safeguards

Data stored in SOC 2 Type II certified data centres
Physical access controls to server infrastructure
Device and media controls for workstations
Secure disposal of hardware containing PHI

Technical Safeguards

AES-256 encryption for all data at rest
TLS 1.3 encryption for all data in transit
Unique user identification and audit logs
Automatic session timeout after inactivity
Two-factor authentication for dashboard access

Breach Notification

Immediate internal incident response protocol
Notification to affected clinics within 24 hours
HHS notification within 60 days as required by law
Full breach investigation and remediation report

Questions About HIPAA Compliance?

Our compliance team is available to answer any questions, provide documentation, or sign your BAA. Contact us at Shahzaib111.ms@gmail.com