LiveKit Community

Hi LiveKit Team,

How to be HIPAA compliant is a bit ambiguous in the documentation. What is the difference between LiveKit inference and explicitly calling a third party service? Is one covered in the BAA with LiveKit while the other is not? I wrote a post <https://livekit-users.slack.com/archives/C088ZNU7QQ5/p1763683421552279|here> and was looking for some clarity.

Yes, that's right, if you are using LiveKit inference, the BAA with LiveKit will also cover the models listed under <https://livekit.io/legal/hipaa> (note there may be models supported by inference that are not on this list)

If you are calling the model through our open source plugins, using your own credentials, then you are responsible for establishing the BAA with each provider.

<@U09G4AF3NFR>, is `silero` covered in the BAA? I was reviewing the code snippet from above and realized that is is an open source plugin that may not be. It is not on the page that you linked above.

Assuming you are hosting the agent on LK cloud, you would be running `silero` inside our agent container, not calling out to a separate VAD provider, so this would be covered under `Agent hosting` on that page (<https://livekit.io/legal/hipaa>)