Best free HIPAA-compliant AI for healthcare, compared

Yes. Rivvi's free organization plan includes a HIPAA BAA for you and two colleagues, in a workspace that knows the organization. Doximity Ask and OpenEvidence are free for verified U.S. clinicians and include a BAA for those users. ChatGPT Free and Claude Free do not include a BAA.

No. OpenAI does not list ChatGPT Free, Go, Plus, or Pro as HIPAA eligible. A BAA is available on ChatGPT for Healthcare, ChatGPT for Clinicians, ChatGPT Enterprise with a Regulated Workspace, and the API with Modified Retention.

Doximity's assistant, formerly DoxGPT, is now Doximity Ask. Doximity says it is free for verified U.S. physicians, NPs, PAs, and medical students, and that it enters a BAA with each user at registration. It is built for the individual clinician, and prompts are private to each clinician.

OpenEvidence says it is free for verified U.S. healthcare professionals, and its standard BAA, part of its Terms of Use, applies to covered entities that enter PHI. It answers clinical questions from peer-reviewed literature. It is not an organization workspace.

Yes. On an organization workspace, the conversation and the files you upload are saved for the organization. On the free personal plan, clinical files and a pasted transcript that names a patient are not stored. The conversation itself is still saved with the workspace. Turn on "Don't save this chat" and that conversation is not saved. Settings, then Compliance, is where the organization sees this.

Retention schedules by data class, and the vendors that touch protected health information, are published in Rivvi's Trust Center at trust.rivvi.ai. An organization can ask its account team for a retention override. To keep one conversation out of the workspace, turn on "Don't save this chat" before you send. An org admin can turn the switch off for the whole organization.

Yes, for one conversation. Turn on "Don't save this chat" in the composer. Messages, files, and answers are not saved, and uploads are deleted after each answer. Clinical files stay off the personal plan. An organization that has not signed a BAA does not store clinical files or a pasted transcript until the BAA is signed from Settings, then Compliance.

Usually no. Most general AI tools offer a BAA only on enterprise or healthcare plans. The free tools that include one are limited to verified clinicians. Rivvi's free organization plan (you and two colleagues) includes a HIPAA BAA.