https://retellai.com/?utm_source=discord&utm_medium=seo logo
I saw that your BAA is available for self-signing
# ❓・ai-evy-support
k
@AI Evy I saw that your BAA is available for self-signing. A few things I want to confirm: Does signing the self-serve BAA cover PHI that passes through voice calls in real time including clients verbally confirming their name, phone number, and address during inbound calls? Is there any additional cost for HIPAA compliance beyond standard usage pricing? Does the BAA cover your sub-processors including the LLM, STT, and TTS providers used in the pipeline?
a
Thanks for tagging me @kingme009. I'll look through relevant sources and get back to you shortly.
### Answer Based on the available sources, here's what I can confirm about Retell AI's HIPAA compliance and BAA: BAA Availability and Cost You can sign a BAA at no additional cost through [(1) ]() [(2) ]() . HIPAA compliance is available without requiring an Enterprise plan . PHI Handling Retell AI provides end-to-end encryption for all calls and data [(2) ]() . For PHI protection, you can opt out of data storage after the call ends so it won't be stored on Retell's systems [(1) ]() [(2) ]() . If you prefer not to store data on Retell AI's servers, you can opt out of sensitive data storage, which allows you to control how call recordings and sensitive information are handled [(3) ]() [(4) ]() . When you enable the opt-out option, call recordings won't be stored on Retell's systems, and you'll need to store them in your own database if you want to maintain access to call logs . The webhook payload structure remains the same, though some data might not be included if opt-out is enabled . Additional Information For more detailed information about compliance controls, you can visit the trust center at [(1) ]() [(2) ](h
ttps://discord.com/channels/1186424376300679209/1186462578310910112/1466180363058544713) . For specific questions about sub-processor coverage or other compliance details, you can email compliance@retellai.com [(2) ]() .
​ To learn more, see the sources I considered: [[1] Discord message from @nabokov0482 on 2026-01-28](https://discord.com/channels/1186424376300679209/1186462578310910112/1466157836168990852) [[2] Discord message from @omar.13. on 2026-01-28](https://discord.com/channels/1186424376300679209/1186462578310910112/1466180363058544713) [[3] Health Care Use Case](https://community.retellai.com/t/health-care-use-case/746) [[4] Hipaa Compliance](https://discord.com/channels/1186424376300679209/1410647478537293905) ​
Feel free to tag @AI Evy with additional questions. I also appreciate feedback, it helps me improve.
k
@AI Evy Does the BAA cover your sub-processors including the LLM, STT, and TTS providers used in the pipeline?
a
Thanks for the follow-up, @kingme009. I'll get back to you soon.
​ To learn more, see the sources I considered: [[1] BAA for HIPAA Compliance](https://discord.com/channels/1186424376300679209/1328413653992476805) [[2] Retell AI’s Voice Agents: HIPAA Compliance and BAAs | Retell AI](https://www.retellai.com/blog/do-retell-ais-voice-agents-have-hipaa-compliance-and-baas) ​
### Answer Based on the available sources, I don't have specific information about whether Retell AI's BAA covers sub-processors including LLM, STT, and TTS providers used in the voice pipeline. For detailed information about sub-processor coverage and what's specifically included in the BAA, you should contact support@retellai.com with the signer name and email address [(1) ]() . You can also reach out to compliance@retellai.com for specific compliance-related questions about sub-processor coverage. The sources confirm that Retell AI provides HIPAA-compliant infrastructure with features like end-to-end encryption, secure authentication protocols, and comprehensive access controls [(2) ]() , but the specific contractual details about sub-processor coverage in the BAA aren't documented in the available materials.
Feel free to tag @AI Evy with additional questions. I also appreciate feedback, it helps me improve.