How does one get a hipaa baa with livekit
# ask-aip
powerful-father-67916
04/04/2026, 7:48 PMHow does one get a hipaa baa with livekit
✅ 1
t
tall-airline-16756
04/04/2026, 7:48 PMThanks for reaching out, Vihaan. I'm an AI assistant and I'm here to help. Give me a moment while I research this topic.
tall-airline-16756
04/04/2026, 7:48 PMThanks — I can help with that. You're asking how to get a HIPAA BAA with LiveKit.
LiveKit does offer a BAA for customers who need to handle PHI. To use LiveKit for HIPAA-covered data you must have an executed BAA first. The HIPAA-eligible LiveKit Cloud services include realtime transport (WebRTC/SIP), ingress/egress (recording & export), agent hosting/observability, and certain Inference models (e.g., AssemblyAI, Deepgram for STT; OpenAI, Google, etc. for LLMs — see the HIPAA page for full model lists).
To start the BAA process, contact LiveKit directly via email or the contact sales form: https://livekit.com/contact-sales. For full details, see https://livekit.com/legal/hipaa.
If you’d like, tell me:
• Whether you’re a Covered Entity or Business Associate, and
• Which LiveKit features (recording, STT, specific models) you plan to use—
and I’ll outline the next steps and required information for the BAA request.
Sources: HIPAA Eligible Products and Services | LiveKit | Terms of Service | LiveKit, with interactive elements
p
powerful-father-67916
04/04/2026, 7:52 PMWe're operating as a business associate; these are the livekit services we're using: - rooms/media
- server API
- token auth
- agents
- mobile SDK/WebRTC
t
tall-airline-16756
04/04/2026, 7:53 PMThanks — got it. You’re a Business Associate and using: Rooms/media, Server API, Token auth, Agents, and Mobile SDK/WebRTC. I can help outline the next steps to request a HIPAA BAA.
What to expect and do next
• LiveKit requires an executed BAA before you handle PHI.
• Send a BAA request via the contact form: https://livekit.com/contact-sales or by email (use the same contact channel you prefer).
• In your request include:
◦ Your organization name and that you’re a Business Associate.
◦ A short description of how you’ll use LiveKit (list the services you provided).
◦ Which data flows will involve PHI (e.g., recordings, STT transcripts, agent logs).
◦ Any specific Inference or third‑party models you plan to use (if applicable).
◦ Primary contact name, email, and billing/account ID (if you have one).
What LiveKit will confirm or require
• Execution of the BAA before using HIPAA-eligible services with PHI.
• Confirmation of which LiveKit services and Inference models are HIPAA-eligible for your use.
• Any technical controls or configuration recommendations to limit PHI exposure (they’ll advise during the process).
If you’d like, I can draft the exact message for you to paste into the contact form with the details above. Which contact method do you prefer, and do you want me to draft that request now?
, with interactive elements
13 Views