AI scribe / clinical notes: compared
Ambient scribes and note writers that listen to the visit or session. Sorted by verdict. Columns describe each tool's best BAA-eligible plan; the tool page shows every plan.
| Tool | Verdict | Starting price (published) | BAA self-serve? | Trains on your data? | SOC 2 | HITRUST | BAA fine print |
|---|---|---|---|---|---|---|---|
| AbridgeAbridgeMedical | Safe with BAAThe vendor publicly offers a BAA on every plan we list. | Unverified | Unverified | Unverified | Yes | Unverified | Abridge may de-identify PHI, and return/destruction after termination is generally 'not feasible' (s.4.4). |
| BlueprintBlueprintTherapy | Safe with BAAThe vendor publicly offers a BAA on every plan we list. | $0.99/session or $69/seat/mo unlimited | Yes | Nono (not 'outside the provision of the Services') | Yes | Unverified | No AI training on clinic data 'outside the provision of the Services', which is narrower than a flat ban; de-identified, aggregated data allowed. |
| DeepCuraDeepCuraMedicalDentalTherapy | Safe with BAAThe vendor publicly offers a BAA on every plan we list. | $129/provider/mo | Yes | No PHI; ToS allows aggregated/de-identified use to develop its technologyno PHI; ToS allows aggregated/de-identified use to develop its technology | No | Unverified | Vendor openly says it is not SOC 2 certified; ToS permits aggregated/de-identified use for product development. |
| FreedFreedMedicalTherapy | Safe with BAAThe vendor publicly offers a BAA on every plan we list. | from $39/mo | Yes | No PHI; trains on de-identified notesno PHI; trains on de-identified notes | Yes | Unverified | Freed trains on de-identified notes; audio deleted after processing; notes auto-delete after 30 days unless saved elsewhere. |
| HeidiHeidi HealthMedicalTherapy | Safe with BAAThe vendor publicly offers a BAA on every plan we list. | Unverified | Yes | Nono | Yes | Unverified | BAA bars using PHI to train or improve AI models. |
| MentalycMentalycTherapy | Safe with BAAThe vendor publicly offers a BAA on every plan we list. | from $14.99/mo billed annually | Yes | Nono (never trains on session data) | Yes | Unverified | BAA s.20 caps Mentalyc's total liability at $10,000. Disclosures reported within 5 business days; breaches within 30 days. |
| NablaNablaMedicalTherapy | Safe with BAAThe vendor publicly offers a BAA on every plan we list. | Unverified | Yes | Unverified | Yes | Unverified | No audio stored by default; notes kept 14 days unless configured. |
| SimplePractice Note TakerSimplePracticeTherapy | Safe with BAAThe vendor publicly offers a BAA on every plan we list. | $35/clinician/mo add-on after 30-day trial | Unverified | Yesyes (de-identified transcripts retained to improve AI since June 17, 2026; opt-out per clinician/client/session) | Unverified | Yes | Since June 17, 2026 SimplePractice may keep de-identified transcripts to improve its AI unless you change retention settings. Built on Anthropic's Claude. |
| SukiSuki AIMedical | Safe with BAAThe vendor publicly offers a BAA on every plan we list. | Unverified | Unverified | Yesyes (de-identified) | Unverified | Unverified | Suki trains on de-identified data; audio/transcripts deleted after 30 days. |
| TwofoldTwofold HealthMedicalTherapy | Safe with BAAThe vendor publicly offers a BAA on every plan we list. | $49/mo billed annually; $69 month-to-month | Yes | Nono ('Never on your data') | In progress | Unverified | BAA covers the free trial; groups can get an org-wide BAA. SOC 2 is still 'in progress'. |
| UphealUphealTherapy | Safe with BAAThe vendor publicly offers a BAA on every plan we list. | Free plan; AI Notes $39/mo; EHR $1/session | Yes | No without explicit permission of clinician and clientno without explicit permission of clinician and client | Yes | Unverified | De-identified, aggregated data may be used to improve the app; liability is subject to the main Agreement's limits. |
| AmbienceAmbience HealthcareMedical | UnverifiedA BAA is mentioned only as negotiable or 'as applicable'. We found no public way to get one. | Unverified | Unverified | Unverified | Yes | Unverified | Privacy policy allows de-identified data to be shared with vendors and academic researchers. |
| Microsoft Dragon Copilot (formerly Nuance DAX)Microsoft / NuanceMedical | UnverifiedWe could not confirm a BAA from the vendor's own pages. | Unverified | Unverified | Yesyes (de-identified or pseudonymized) | Yes | Yes | Models trained on anonymized data; limited 'human review' by Microsoft staff/subprocessors; audio kept up to 90 days. |
Not legal advice. Prices are as published on the vendor's site on the date checked, not quotes. "Unverified" means the vendor's own pages didn't say.