BAA and terms
Ask for the BAA, service terms, privacy language, and subprocessors before any pilot that uses patient data.
Security guide
HIPAA-compliant AI dental scribe
Avora is a HIPAA-compliant AI dental scribe that signs a BAA, encrypts PHI in transit and at rest, and supports retention controls.
Book a Demo1,000+
dental professionals using Avora
Avora is used by dentists, hygienists, treatment coordinators, operations leaders, and dental groups across the United States.
BAA
available for Avora customers
Dental practices should not use an AI scribe with PHI unless the vendor will sign a business associate agreement.
D
DJ DentalDS
Transcript
Chief ComplaintUpper right tooth pain x ~2 weeks; cold sensitivity that lingers. Pain increases when chewing and patient points to #3.23
Med hxLisinopril 10mg daily. No recent medical changes. No contraindications reported for planned dental treatment.12
Dx
Tx plan
What makes an AI dental scribe HIPAA compliant?
A HIPAA-compliant AI dental scribe should sign a BAA, protect PHI in transit and at rest, document retention and deletion controls, limit unnecessary data use, and support audit-ready workflows. Avora signs a BAA, encrypts PHI in transit and at rest, and supports retention and deletion controls for dental practices.
HIPAA questions to ask any AI dental scribe vendor
HIPAA is not a single badge. Practices should ask for written answers about contracts, data flow, retention, access, and review.
| Question | Why it matters | Avora position |
|---|---|---|
| Will the vendor sign a BAA? | Dental recordings and clinical notes contain PHI. | Avora signs a BAA for customer deployments. |
| How is PHI protected? | Audio, transcripts, notes, and identifiers need safeguards. | Avora encrypts PHI in transit and at rest. |
| What are the retention controls? | Practices need to understand deletion, retention, and access policies. | Avora supports retention and deletion controls. |
| How are notes reviewed? | AI-generated chart notes still require provider review. | Avora makes findings reviewable against the appointment context. |
PMS workflows also affect security review
A security review should cover both the AI vendor and the way data moves into the PMS.
| PMS | Avora workflow | Common handoff areas |
|---|---|---|
| Dentrix | Native | Progress notes, perio, patient communications |
| Open Dental | Native | Progress notes, perio, patient communications |
| Eaglesoft | Native | Progress notes, perio, patient communications |
| Denticon | Native | Progress notes, perio, patient communications |
| Dentrix Ascend | Native | Progress notes, perio, patient communications |
| Other cloud PMS | Verify before rollout | Coverage varies by workflow |
PMS workflows vary by version, field, and rollout scope. Verify your exact configuration before signing.
Security review should happen before rollout
Because dental AI notes include PHI, the security review should be part of buying the product, not an afterthought after providers start recording.
Data minimization
Confirm what audio, transcript, and note data is stored, for how long, and who can access it.
Provider review
HIPAA readiness does not replace clinical review. Providers still need a workflow for verifying and signing notes.
Frequently asked
Questions practices ask
Is Avora HIPAA compliant?+
Avora signs a BAA, encrypts PHI in transit and at rest, and supports retention and deletion controls. Practices should still complete their own vendor review before rollout.
Can AI dental scribes use patient recordings?+
AI dental scribes can process patient recordings when the vendor and practice have appropriate HIPAA agreements, safeguards, consent workflow, and retention policies. Recording-consent laws vary by state, so practices should verify requirements with counsel.
What should I ask about AI model training?+
Ask whether patient recordings, transcripts, or clinical notes are used to train models, whether opt-in is required, and how data is de-identified or deleted. Get the answer in writing before using real patient data.
Bring your security checklist to the demo.
We will walk through Avora's BAA, data flow, PMS workflow, and provider review process with your team.
Book a demo