Change log

Every time a vendor changes a BAA, training default, retention rule or certification, we log it here and in The VRC Newsletter.

2026-10-16: Buyer's-guide relaunch

Added 15 practice-specific tools (therapy note tools, AI receptionists, dental AI, more scribes) and four new fields: practice fit, starting price, BAA self-serve and BAA fine print. Every tool now has a verdict. Raised verification on Perplexity SOC 2 (now fetched), OpenEvidence training (no PHI used for AI training) and Dragon Copilot training (anonymized data, limited human review).

New vendor change seen in source pages: SimplePractice says that starting June 17, 2026 it may keep de-identified Note Taker transcripts to improve its AI, with opt-outs per clinician, client or session.

2026-10-16: Launch baseline

First full check of 26 tools and 46 plans. 136 fields verified from vendor pages, 140 marked unverified.

Recent vendor changes we saw in source pages (as dated by the vendor):

OpenAI: "HIPAA eligible products and functionality" page updated about 2 days before our check; lists ChatGPT for Clinicians (free BAA for verified US clinicians) and Enterprise with Regulated Workspace.
Anthropic: BAA coverage article updated on our check date; Claude Code and Cowork (local mode) are now coverable under a HIPAA configuration.
Google: Gemini Apps Privacy Hub updated Oct 13, 2026. Gemini Notebook (formerly NotebookLM) is still outside the Workspace BAA.
Microsoft: Microsoft 365 Copilot renamed Microsoft Copilot; new consumer Copilot app (Aug 18, 2026) stays outside the BAA.