AI for clinics, dental offices and chiropractors: real uses and the HIPAA rules

By Ranjit Bhinge, founder of Blur Studio · Updated October 24, 2026 · 7 min read

Short answer: Clinics use AI to answer phones, book and remind patients, write visit notes and handle insurance paperwork. Any AI vendor that creates, receives, keeps or sends patient information for you is a business associate under HIPAA, so the vendor must sign a business associate agreement (BAA) before you use it. Start with one front desk task, keep a person reviewing anything clinical, and tell patients when a call or visit is recorded.

You run a clinic, dental office or chiropractic practice and want to know what AI can safely do without putting patient data or compliance at risk.

I'm Ranjit, and I run Blur Studio: 15+ years building software, 120 apps taken live, and clients who have gone on to raise $10M+. I build AI systems and processes that help businesses do a lot more with a lot less time. I also work differently from most of what else is out there, more on that further down this page. Say hello.

How are clinics using AI?

The best uses are routine tasks where a staff member or provider still checks the result.

Answering the phone

An AI receptionist answers when the front desk is busy or closed. It books, moves and cancels visits, and it answers simple questions like hours and parking. It must never give medical advice. Anyone who describes an emergency should be told to call 911. My guide to a medical answering service compares AI with live answering services for clinics.

Booking and reminders

AI can offer open times by text or chat and fill gaps from cancellations. It can send reminders and ask patients to confirm. Fewer no-shows means more filled chairs and tables. My page on appointment reminder software covers the tools for this.

Writing visit notes

AI scribes listen to the visit and draft the note. The provider reads it, fixes it and signs it.

Insurance and paperwork

AI can read intake forms and insurance cards and fill in the fields. It can draft prior authorization letters and appeal letters for a person to check and send.

Patient messages

AI can draft replies to portal messages, such as a question about a bill or a request for records. Staff review the draft before it goes out.

How does AI help dental offices and chiropractors?

Each type of clinic has its own busy spots.

Dental offices: Phones ring all day with bookings, recalls and insurance questions. AI can run recall reminders for cleanings, answer insurance questions from a script and fill last-minute openings. My dental practice management software guide covers the systems these tools connect to.
Chiropractors: Patients often come in for a series of visits. AI can book the full care plan, remind patients between visits and draft the daily notes. See my guide to chiropractic software for the main systems.
Medical clinics: AI scribes, refill request triage and referral letters save the most time. Clinical decisions stay with the provider.

What AI tools do clinics use?

I took the prices here from the vendors' own sites in October 2026. Ask every vendor for a BAA before you sign up.

Freed: An AI scribe that listens to the visit and drafts the note. The Starter plan is $39 a month as an offer price, down from $59, for one clinician and up to 40 notes a month. Premier is $119 a month billed monthly, or $104 a month billed yearly, and adds sending notes to the EHR. Freed says it is HIPAA compliant, and its Groups plan lists an organization-wide BAA.
Heidi Health: An AI scribe with a free plan for one seat and a weekly usage limit. Its Clinician plan has a 14-day free trial. Heidi shows no public price for its paid plans, so ask its sales team for a quote.
Weave: A phone, texting and patient messaging system for dental, medical, optometry and vet offices. Plans start from $199 a month. Weave lists Call Intelligence, an AI feature that helps turn more calls into booked visits.
The AI in your practice software: Your practice management system or EHR may already include AI features. Check what you already pay for first.

Tool	Main job	Price shown (October 2026)
Freed	AI visit notes	$39 a month offer, $104 to $119 a month for Premier
Heidi Health	AI visit notes	Free plan, paid plans by quote
Weave	Phones, texts, reminders	From $199 a month

What HIPAA rules apply to AI in a clinic?

HIPAA applies to AI the same way it applies to any other vendor. The difference is that AI tools often see more patient data than you expect.

Every AI vendor that touches patient data needs a BAA

HHS says a business associate is any outside party that creates, receives, keeps or sends protected health information for you. Cloud services and transcription services are on its list of examples. An AI receptionist that hears a patient's symptoms or an AI scribe that records a visit fits that description.

You must get written assurance from the vendor before you share patient data. That written assurance is the business associate agreement. HHS says it must cover:

Allowed uses: What the vendor may do with the patient data.
Limits: A ban on any other use or sharing.
Security: A duty to follow the HIPAA Security Rule, including for the vendor's own subcontractors.
Incident reports: A duty to report security incidents and breaches to you.

If a vendor will not sign a BAA, do not put patient data into it. That includes free chatbots and personal AI accounts.

The HIPAA Security Rule update

HHS proposed a major update to the HIPAA Security Rule in January 2025. The final rule has not been issued. The federal regulatory agenda now targets July 2027 for it. Plan for stricter security rules, and keep a list of every AI tool that holds patient data.

State rules on AI messages to patients

Some states add their own rules. In California, section 1339.75 of the Health and Safety Code covers clinics and doctors' offices that use generative AI to write messages about a patient's clinical information. Those messages must say they were made by AI. They must also tell the patient how to reach a human. The rule does not apply when a licensed provider reads and reviews the message before it goes out. Check your own state's rules too.

Recording visits and calls

AI scribes and AI receptionists record people. Federal law allows recording when one person on the call agrees. Justia lists some states that require everyone to agree, including California, Florida, Illinois, Maryland, Massachusetts and Pennsylvania. Ask patients for consent before an AI scribe records a visit, and add a recording notice to your phone greeting.

What are the risks of AI in a clinic?

Wrong notes: AI scribes can mishear a drug name or a dose. The provider must read every note before signing it.
Advice by accident: A chatbot may answer a medical question it should refuse. Test it with hard questions before patients use it.
Data in the wrong place: Staff may paste patient details into a free AI tool. Write a short policy that says which tools are allowed.
Missed emergencies: An AI receptionist must send urgent calls to a person or tell the caller to call 911.

How should a clinic start with AI?

Pick one task: Choose the job that costs your team the most time, such as phone overflow or visit notes.
Get the BAA first: Do not test with real patient data until the vendor signs one.
Test with fake data: Run made-up patients and calls through the tool and check every result.
Go live with review: Keep a person checking every note or booking for the first month.
Measure: Count hours saved, calls answered and no-shows. Keep what works.

When does a custom AI tool make sense for a clinic?

Most small clinics should start with the AI in their practice software or a tool like the ones above. A custom build makes sense in these cases:

Your systems don't connect: Your phones, forms, practice software and billing tool are separate, and staff copy data between them.
Your own intake rules: You triage patients in a way no product supports, such as by care plan or by insurance type.
Several locations: You need calls and bookings routed by location, provider and service.
Data control: You want patient data to stay in systems you control, under your own BAA chain.

My page on the AI receptionist covers the build vs buy choice for phone answering.

What mistakes do clinics make when they adopt AI?

Turning on an AI scribe before every vendor in the chain has signed a BAA. An AI note-taking tool, the transcription service behind it and any storage layer all need a Business Associate Agreement before patient data touches them, not just the main vendor.
Letting AI draft clinical notes without a clinician reviewing every one before it is filed. AI-drafted notes read confidently even when a detail is wrong, and a wrong detail in a medical record is a different kind of mistake than a wrong detail in a marketing email.
Not telling patients an AI tool was part of their visit. Most patients do not mind. Almost all of them mind finding out later that nobody told them.

How would Blur Studio approach AI for a clinic?

I would start with your BAA list and a week of front desk tasks. That shows where staff time goes and which vendors already see patient data. I then builds AI workflows that connect to your practice software, such as an intake assistant or a phone agent that books into your schedule. Clinical content always goes to a person for review. The code and every account belong to your clinic, and I takes care of the system after launch.

Questions people ask

Is ChatGPT HIPAA compliant for clinics?

A clinic should only put patient data into an AI tool whose vendor has signed a business associate agreement. Free and personal AI accounts do not come with one, so keep patient data out of them.

Do AI scribes need a BAA?

Yes, an AI scribe that records or stores patient visits handles protected health information. HHS rules say the clinic needs a business associate agreement with the vendor before it shares that data.

Can an AI receptionist book appointments for a dental office?

AI receptionists can book, move and cancel dental appointments and send recall reminders. The vendor must sign a BAA, and the AI should pass clinical questions to a staff member.

Do clinics have to tell patients they use AI?

It depends on the state. California requires a notice on AI-written messages about a patient's clinical information unless a licensed provider reviews them first, so check your own state's rules.

Has the new HIPAA Security Rule been finalized?

The update HHS proposed in January 2025 has not been finalized. The federal regulatory agenda now targets July 2027 for a final rule.

Does every AI vendor in the chain need a BAA, or just the main one?

Every vendor that touches patient data needs one, including a transcription service or storage layer working behind the main tool, not only the vendor you directly signed up with. Ask for the full list of subcontractors before you rely on any single BAA.

Roughly what does this cost?

As a broad reference, fixes and finishes start at around $1,500, and new builds start higher, always a fixed price agreed in writing before I start, never an hourly rate. My AI app cost guide explains what actually drives a quote up or down.

Is my project too small for this?

No. Most of the owners I work with have no tech team at all, that is the whole point. If the smarter move is a cheap software subscription instead of custom software, I will tell you that on the first call, even though it means I do not get paid.