Privacy for US dental practices
In the United States, HIPAA protects your patients’ health information. Your practice is the covered entity, and DentalAssist.ai is your business associate. We handle your patients’ information only on your behalf, only to run the service, and under a signed Business Associate Agreement.
Last updated November 12, 2026
What every US practice gets
- A signed Business Associate Agreement before go-live.
- Service providers that handle patient information only under written agreements, including Business Associate Agreements where HIPAA requires them.
- Our current list of service providers, with what each one does and where it processes data, on request.
- Notice within 72 hours if an incident affects your practice’s information.
- Deletion of your data within 30 days if you ask, and a copy of your data within 30 days if you leave.
How HIPAA applies
- Use and disclosure: we use your patients’ information only to provide the service to your practice. We do not use it to train AI models, and we do not sell it.
- Safeguards: encryption in transit and at rest, multi-factor authentication and role-based access. See the trust page for details.
- Incidents: we tell you within 72 hours of becoming aware, with the information you need for any notices HIPAA requires of your practice.
- Patient requests: if a patient asks to see or correct their information, we help your practice respond.
Where your information is stored
Practice and patient records are stored with Amazon Web Services in Canada, for every practice we serve. To run calls, some of our service providers process call data in the United States, and some keep limited records there. Our Business Associate Agreement applies wherever we hold your information.
Honest about AI
Every caller is greeted by our digital receptionist, and it always confirms it’s an AI if asked.
Common questions
Will you sign our Business Associate Agreement, or yours?
Every US practice signs our Business Associate Agreement before go-live. If your practice has its own, send it to privacy@dentalassist.ai and we will review it.
Is it a problem that records are stored in Canada?
HIPAA does not require health information to be stored in the United States. The same safeguards and the same Business Associate Agreement apply. If your practice has its own policy on where data may be stored, tell us before go-live.
Does our state have extra rules?
Some states add their own health privacy or AI rules. Tell us where your practice is and we will work through them with you before go-live.
This page is general information about how DentalAssist.ai works. It is not legal advice. Your practice is responsible for its own obligations under HIPAA and the laws of its state.