HIPAA and a medical answering service: four layers, four agreements
You can't buy HIPAA compliance as a product feature. For a medical answering service it is a chain of business associate agreements, one for every company that hears or stores a patient's call. An AI receptionist has at least four links in that chain, so ask every vendor to name each one.
The short version
- HIPAA compliance runs on business associate agreements with every layer that handles patient information. A label on a vendor's website doesn't replace them.
- For an AI receptionist, those layers are the phone carrier, speech-to-text, the language model and voice synthesis, at minimum. A human answering service adds its own staff and call software.
- GreetKeeper does not make a HIPAA claim.
- The useful question for any vendor is which of its suppliers have signed an agreement with it. A vendor ready for clinical calls names each one in writing.
HIPAA runs on signed agreements, not on labels
HIPAA puts duties on covered entities, such as your practice, and on their business associates. Those duties flow through signed business associate agreements. No government body issues a software badge that stands in for them.
So a vendor's HIPAA page tells you what the vendor believes about its own practices. You learn the rest by asking which agreements it holds, with whom, and whether it will sign one with you.
That's why a search for a compliant medical answering service returns so many near-identical pages. Every vendor can write the word. Far fewer can hand you the list of agreements behind it the same afternoon you ask.
Why a voice call has four layers to check
A patient's call passes through more companies than most practices expect. The carrier connects it. A speech-to-text service turns the audio into words. A language model decides what to say, and a voice service speaks the reply.
Each of those is a separate business hearing what a patient said out loud. Storage adds a fifth if recordings or transcripts sit with yet another provider.
A human answering service has the same question in a different shape. Ask which staff hear the call, where they work, and which call software logs it. The number of links changes; the need for an agreement at each one stays.
How GreetKeeper keeps a patient call narrow
Recording is a setting you control, so your practice can keep audio off and work from the transcript and short summary. Less audio on file means less to govern.
A GreetKeeper healthcare setup covers enquiries and scheduling. It books into Google Calendar or Outlook and reads the name, number and time back before it confirms. When a caller asks for a person, it transfers to your team. Clinical detail stays in your practice's own system.
GreetKeeper tells the caller it's an AI at the start of the call, in your wording, which Utah requires of licensed practices. Its webhook passes a link to the transcript rather than the text itself, so the tools you connect get only what they need.
Five questions to ask every medical answering service
Which subprocessors touch the audio and the transcript? Ask for company names, not categories. A vendor set up for clinical calls answers in writing.
Will you sign a business associate agreement with us, and which of your own suppliers have signed one with you? The second half sorts vendors fastest.
What is stored, for how long, and can we switch recording off? A setup that keeps no audio and a short transcript carries far less to protect than one that keeps everything for a year.
Where do clinical questions go? A scheduling line that routes clinical calls to your staff keeps patient detail out of the answering layer entirely.
Then take every answer to your own counsel. The answers belong in your practice's risk assessment, filed next to the agreements themselves.
Setting up a scheduling line for a practice
Train the greeting on your booking rules, your hours and the three questions new patients ask most. Point GreetKeeper at your website for the first draft, then correct it.
Set closure dates for holidays so callers hear that you're closed that day, and nominate a second number for urgent transfers in case the first one rings out.
Hear it handle one of your own calls
Your scenario, your greeting, a couple of minutes.