HIPAA and
workplace AI.
Covered entities and business associates must keep PHI within appropriate safeguards, including when staff use AI. PromptGlass detects PHI in prompts and uploads, blocks or redacts it for tools you have not approved, and records each event.
Requirement mapping
How PromptGlass supports HIPAA
An indicative mapping of themes in the framework to PromptGlass capabilities. Your auditors and counsel determine what applies to you.
| Theme | How PromptGlass helps |
|---|---|
| Safeguards for PHI | ✓PHI detectors with redact and block actions applied before data reaches a model. |
| Use only approved vendors | ✓Allow PHI only to AI tools you have approved, and reroute the rest. |
| Audit controls | ✓Every AI interaction involving PHI is logged with user, tool and action. |
| Workforce training | ✓Coaching messages explain the rule at the moment it applies. |
This page is general information, not legal advice. Using PromptGlass does not by itself make an organization compliant with HIPAA.
HIPAA and AI usage: FAQ
Will PromptGlass sign a BAA?
+
Contact us about a BAA for PromptGlass Cloud. Many healthcare customers choose self-hosted deployment so that PHI never leaves their environment.
Find out how your company really uses AI.
Start a free 30-day AI usage assessment: a complete shadow AI inventory, the sensitive data leaving, and the AI seats you are paying for but not using.