hipaa.chat answers one family of questions: what changes under HIPAA when the conversation is a chat — live chat on a clinic website, a chat API inside your own product, an AI assistant, or a video call.
What this site is
A small reference hub. Four sections, each owned by one question:
- Live chat — talking to patients on your website
- Chat APIs & SDKs — building chat into your product
- AI chat — letting an assistant see PHI
- Video chat — seeing patients on camera
Every page states where its claims come from and the date they were last checked. Vendor claims are cited to the vendor's own pages — BAA terms, pricing, security documentation — never to third-party roundups.
What this site is not
- It does not issue vendor verdicts. "Is X HIPAA compliant?" questions, with sources and verification dates, live on hipaacompliant.wiki, a sister site with a published methodology.
- It does not cover internal staff chat. Secure messaging for care teams is a product question, answered at chanty.health.
- It is not legal advice. HIPAA has no certification; a business associate agreement is necessary, not sufficient. Decisions about PHI belong with your compliance officer and counsel.
Who publishes it
hipaa.chat is published by Chanty, Inc., the company behind the Chanty team chat and chanty.health. Chanty products compete with some tools this site discusses; wherever a Chanty product is relevant, it appears in its own clearly-marked line and is held to the same evidence standard as everything else. Placement on this site is never paid.
Corrections
If a sourced claim here is wrong or out of date, use the correction form on the wiki: hipaacompliant.wiki/submit. Corrections are checked against the vendor's own pages and applied with a new verification date.
Sources
- HIPAA rules: HHS (hhs.gov) and the eCFR, 45 CFR Parts 160 and 164
- Vendor claims: the vendor's own BAA, pricing and security pages, cited inline with the date checked
Last verified: 2026-11-03