Smart Dial legal & trust center
Healthcare & HIPAA Information
Accurate information for healthcare organizations evaluating Smart Dial and workflows involving PHI.
No government certification
The U.S. Department of Health and Human Services does not issue an official HIPAA certification or seal for products or business associates. A badge, self-attestation, or third-party certificate does not by itself establish HIPAA compliance.
Customer and Smart Dial responsibilities
HIPAA obligations depend on the customer’s role, data, use case, workforce practices, and configuration. A healthcare customer must determine whether it is a covered entity or business associate and apply the minimum-necessary standard.
Before handling PHI
Do not use Smart Dial for PHI until the workflow has been reviewed, all required Business Associate Agreements are executed, vendor eligibility is confirmed, and the approved configuration is in place.
- Treat contacts, notes, scripts, call audio, transcripts, AI prompts, and support sessions as potentially sensitive.
- Do not place PHI in URLs, unsecured notifications, analytics fields, or support emails.
- Recording and transcription require specific legal, consent, storage, access, retention, and vendor review.
Current readiness limits
Technical access and session safeguards exist, but vendor BAAs, backup and recovery evidence, retention execution, incident procedures, risk analysis, workforce training, and final legal documents are not established by this website. Healthcare readiness must be assessed for the complete workflow.