BAAs
Covered entity ↔ MD Hub ↔ material subprocessors.
08 · Compliance
HIPAA BAA Stack
Not a shared multi-tenant chatbot bolt-on. Dedicated fleet hosts, subprocessor BAAs, member auth before PHI, recording consent, and PCI boundaries for payment-method changes.
Auth before PHI
Verification gates on voice and chat.
PCI lane
Payment method flows stay in compliant channels.
Audit
Access logs, retention, and export for review.