### Answer
(HIPAA, not hippa)
Yes, Retell AI is HIPAA-compliant [(1) ](
) . All interactions processed through Retell AI are encrypted in transit and at rest, adhering to strict data security protocols [(2) ](
) . The system enforces role-based access control (RBAC) , multi-factor authentication, and audit logging to prevent unauthorized access .
Retell AI offers Business Associate Agreements (BAAs) under a flexible pay-as-you-go plan, allowing healthcare organizations to leverage AI voice agents without committing to a yearly contract [(1) ](
) . The BAA is provided at no additional cost [(2) ](
) .
Key HIPAA compliance features include [(3) ](
) [(1) ](
) [(4) ](
) :
- End-to-end encryption for all customer interactions and metadata
- PII Redaction that automatically detects and removes sensitive details like names, addresses, DOBs, passwords, and pins from both transcripts and recordings
- Secure storage with the option to opt out of sensitive data storage
- Detailed call logs and metadata for audit-ability
- Consent management and access controls
For healthcare deployments, you can sign a BAA with Retell AI and enable the option to opt out of sensitive data storage [(5) ](
) . If you want to store recordings in your own database, you can do that through webhooks .